Vulnerabilidades em thembay

36 resultados
Análise Vexday

Thembay apresenta um portfólio de 34 vulnerabilidades conhecidas sem exposição imediata a exploração ativa (zero CVEs em KEV) nem críticas de severidade CVSS. O risco é estrutural e antigo: a fraqueza dominante é CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program), que afeta a integridade de aplicações e sugere vulnerabilidades de inclusão remota ou local não mitigadas há tempo. Ausência de publicações recentes indica que o fornecedor não está em ciclo ativo de correção, mantendo um risco residual moderado e difuso.

CVE-2025-68545HIGHWordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-48171HIGHWordPress Cena Store <= 2.11.26 - Local File Inclusion VulnerabilityEPSS 0.5%CVE-2025-68985HIGHWordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2025-67530HIGHWordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-67528HIGHWordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-67532HIGHWordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68984HIGHWordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68983HIGHWordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-54689HIGHWordPress Urna Theme <= 2.5.7 - Local File Inclusion VulnerabilityEPSS 0.4%CVE-2026-27381HIGHWordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68544HIGHWordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68537HIGHWordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68540HIGHWordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-68546HIGHWordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-66612HIGHWordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-66610HIGHWordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%