← Back

The Wound Project

the_wound_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
The Wound
the_wound
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-2558
1The Wound Project
1The Wound
Jun 17, 2026
Apr 24, 2025
N/A· v4
8.6 HIGH· v3
N/A· v2
The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary fil...Show more
The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the serverShow less