← Back

The Wound

the_wound

Vendor: The Wound Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-2558
1The Wound Project
1The Wound
Jun 17, 2026
Apr 24, 2025
N/A· v4
8.6 HIGH· v3
N/A· v2
The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary fil...Show more
The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the serverShow less