Filtered by vendor Nasatheme Subscriptions
Filtered by product Nasa Core Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-39506 2 Nasatheme, Wordpress 2 Nasa Core, Wordpress 2025-07-12 8.1 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core allows PHP Local File Inclusion. This issue affects Nasa Core: from n/a through 6.3.2.
CVE-2025-39507 1 Nasatheme 1 Nasa Core 2025-06-06 7.5 High
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core allows PHP Local File Inclusion. This issue affects Nasa Core: from n/a through 6.3.2.
CVE-2025-49067 1 Nasatheme 1 Nasa Core 2025-06-06 6.5 Medium
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core allows Stored XSS.This issue affects Nasa Core: from n/a before 6.4.1.