Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 8.1 CVE-2025-69112

WordPress Planty theme <= 1.14.0 - Local File Inclusion vulnerability_CVE-2025-69112

Unauthenticated Local File Inclusion in Planty

ThemeREX Planty n/a CVE
HIGH 8.1 CVE-2025-69109

WordPress Raider Spirit theme <= 1.1.2 - Local File Inclusion vulnerability_CVE-2025-69109

Unauthenticated Local File Inclusion in Raider Spirit

ThemeREX Raider Spirit n/a CVE
HIGH 8.1 CVE-2025-69107

WordPress Rosaleen theme <= 2.8 - Local File Inclusion vulnerability_CVE-2025-69107

Unauthenticated Local File Inclusion in Rosaleen

ThemeREX Rosaleen n/a CVE
HIGH 8.1 CVE-2025-69105

WordPress Modernee theme <= 1.6.0 - Local File Inclusion vulnerability_CVE-2025-69105

Unauthenticated Local File Inclusion in Modernee

ThemeREX Modernee n/a CVE
HIGH 7.1 CVE-2025-69104

WordPress Qreatix theme <= 1.9.4 - Cross Site Scripting (XSS) vulnerability_CVE-2025-69104

Unauthenticated Cross Site Scripting (XSS) in Qreatix

jkdevstudio Qreatix n/a CVE
HIGH 7.5 CVE-2025-69103

WordPress Brikk theme <= 3.0.0 - Arbitrary Content Deletion vulnerability_CVE-2025-69103

Subscriber Arbitrary Content Deletion in Brikk

Utillz Brikk n/a CVE
HIGH 8.1 CVE-2025-60085

WordPress Learnify theme <= 1.15.0 - Local File Inclusion vulnerability_CVE-2025-60085

Unauthenticated Local File Inclusion in Learnify

ThemeREX Group Learnify n/a CVE
HIGH 8.1 CVE-2025-58924

WordPress Geya theme <= 1.15 - Local File Inclusion vulnerability_CVE-2025-58924

Unauthenticated Local File Inclusion in Geya

ThemeREX Group Geya n/a CVE
HIGH 7.5 CVE-2026-48929

CVE-2026-48929_CVE-2026-48929

Rocket.Chat in versions

Rocket.Chat Rocket.Chat CVE
HIGH 8.2 CVE-2026-48788

Remark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofing_CVE-2026-48788

Remark42 is a self-hosted comment engine for blogs, articles, or any other place where readers can add comments. Versions 1.6.0 through 1.15.0 cont...

umputun remark42 >= 1.6.0, < 1.16.0 CVE