#PHP

CVE 2025-03-27

CVE-2025-2294: Unauthenticated Local File Inclusion in Kubio AI Page Builder

Critical vulnerability affecting the Kubio AI Page Builder WordPress plugin

1 min read read

CVE 2025-03-20

CVE-2025-2539: Unauthenticated Arbitrary File Read in File Away

CVE-2025-2539 affects the File Away WordPress plugin through version 3.9.9.0.1. The vulnerability allows unauthenticated attackers to access arbitrary files on the server through an AJAX-based file operation.

4 min read read

CVE 2025-03-19

CVE-2025-4322: Unauthenticated Privilege Escalation via Password Update in Motors WordPress Theme

Critical vulnerability affecting the Motors – Car Dealer, Rental & Listing WordPress theme

7 min read read

exploit 2024-11-21

Voyager Laravel: Authenticated Arbitrary Local File Download via Compass

The Voyager Laravel research repository documents an authenticated arbitrary local file download issue in the Compass tool. A user with valid administrative access can potentially abuse the file-download functionality to retrieve files outside the intended application scope.

4 min read read

exploit 2024-10-02

midia

MIDIA: Unrestricted File Upload / Arbitrary File Upload in a Laravel File Manager Package

7 min read read