Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: PX-lab Clear all filters
TI-2026-69922 CVE-2026-94503 · GHSA-wp92-94wv-wf8f

Unrestricted file upload in WordPress Zombify plugin

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in PX-lab Zombify zombify allows Upload a Web Shell to a Web Server.This issue affects Zombify: from n/a through 1.7.7.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0035 Published 2026-10-09 No fix listed CWE-434
TI-2024-11405 CVE-2024-12295 · GHSA-wq5g-2475-cmrr

Weak password recovery in PX-lab BoomBox Theme Extensions

Priority MEDIUM 40

The BoomBox Theme Extensions plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.8.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00373 Published 2025-03-19 No fix listed CWE-640