Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: SEUR OFICIAL Clear all filters
TI-2025-29192 CVE-2025-46474 · GHSA-4hrj-7997-8qf3

WordPress SEUR Oficial plugin <= 2.2.23 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SEUR OFICIAL SEUR Oficial seur allows PHP Local File Inclusion.This issue affects SEUR Oficial: fro…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-05-23 No fix listed CWE-98
TI-2024-08757 CVE-2024-9438 · GHSA-4693-86x5-g35m

SEUR Oficial <= 2.2.11 - Reflected Cross-Site Scripting

Priority LOW 27

The SEUR Oficial plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'change_service' parameter in all versions up to, and including, 2.2.11 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00392 Published 2024-10-29 No fix listed CWE-80