Wineshop

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-69163 HIGH This Week

Unauthenticated Local File Inclusion in the WineShop WordPress theme versions 3.17 and earlier allows remote attackers to include and execute arbitrary local files on the server via crafted requests. The flaw stems from improper control of filename for include/require (CWE-98) and carries a CVSS 8.1 (High) with full confidentiality, integrity, and availability impact, though no public exploit identified at time of analysis.

PHP Information Disclosure LFI Wineshop

NVD

CVSS 3.1

8.1

EPSS

0.5%

CVE-2025-69163

EPSS 0% CVSS 8.1

HIGH This Week

Unauthenticated Local File Inclusion in the WineShop WordPress theme versions 3.17 and earlier allows remote attackers to include and execute arbitrary local files on the server via crafted requests. The flaw stems from improper control of filename for include/require (CWE-98) and carries a CVSS 8.1 (High) with full confidentiality, integrity, and availability impact, though no public exploit identified at time of analysis.

PHP Information Disclosure LFI +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy