Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: WebGeniusLab Clear all filters
TI-2026-24967 CVE-2026-32439 · GHSA-fv25-wjjf-q2wr

WordPress BigHearts theme <= 3.1.14 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in WebGeniusLab BigHearts bighearts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BigHearts: from n/a through <= 3.1.14.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00247 Published 2026-03-13 No fix listed CWE-862
TI-2025-42501 CVE-2025-69046 · GHSA-292q-3p6w-47gj

WordPress iRecco Core plugin <= 1.3.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebGeniusLab iRecco Core irecco-core allows PHP Local File Inclusion.This issue affects iRecco Core…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-31801 CVE-2025-49886 · GHSA-mq54-4r2f-h89g

WordPress Zikzag Core plugin <= 1.4.5 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in WebGeniusLab Zikzag Core zikzag-core allows PHP Local File Inclusion.This issue affects Zikzag Core…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-27 No fix listed CWE-98
TI-2025-26215 CVE-2025-39473 · GHSA-v624-3q8v-4mqf

WordPress Seofy Core plugin <= 1.6.8 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core seofy-core allows PHP Local File Inclusion.This issue affects Seofy Core: from n/a through <= 1.6.8.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00678 Published 2025-06-09 No fix listed CWE-22