Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Michele Giorgi Clear all filters
TI-2025-30527 CVE-2025-48157 · GHSA-84rq-p3p2-9rxf

WordPress Formality <= 1.5.9 - Local File Inclusion Vulnerability

Priority MEDIUM 42

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: fr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02733 Published 2025-08-20 No fix listed CWE-98
TI-2025-18407 CVE-2025-24690 · GHSA-f82j-r7r9-rwqc

WordPress Formality Plugin <= 1.5.7 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Michele Giorgi Formality formality allows PHP Local File Inclusion.This issue affects Formality: fr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01 Published 2025-03-26 No fix listed CWE-98