Vulnerabilities in PX-lab
4 resultsCVE-2024-12859HIGHBoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via ShortcodeEPSS 0.6%CVE-2025-8385MEDIUMZombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File ReadEPSS 0.4%CVE-2024-12295HIGHBoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_passwordEPSS 0.4%CVE-2026-94503CRITICALWordPress Zombify plugin <= 1.7.7 - Arbitrary File Upload vulnerabilityEPSS 0.4%