Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-67914

WordPress VidMov theme <= 2.3.8 - Path Traversal vulnerability

Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Beeteam368 Wordpress
Products
Vidmov Wordpress
CVE-2025-69373

WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidoRev vidorev allows PHP Local File Inclusion.This issue affects VidoRev: from n/a through <= 2.9.9.9.9.9.7.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Beeteam368 Wordpress
Products
Vidorev Wordpress
CVE-2025-25172

WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidMov vidmov allows PHP Local File Inclusion.This issue affects VidMov: from n/a through <= 1.9.4.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Beeteam368 Wordpress
Products
Vidmov Wordpress
CVE-2025-6379

BeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Beeteam368 Wordpress
Products
Vidmov Wordpress
CVE-2025-6381

BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. This vulnerability can be used to delete the wp-config.php file, which can be leveraged into a site takeover.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Beeteam368 Wordpress
Products
Vidmov Wordpress