Veille CVE

Semaine du 3 novembre au 9 novembre 2025

12 CVE sur 19

Critique 3 Élevée 12 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2025-62066 7.5 Élevée

    fuelthemes Revolution

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8.

  2. CVE-2025-62057 7.1 Élevée

    favethemes Houzez Theme - Functionality

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0.

  3. CVE-2025-62055 8.1 Élevée

    Elated-Themes Academist

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through < 1.3.

  4. CVE-2025-62053 8.1 Élevée

    favethemes Houzez

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez houzez.This issue affects Houzez: from n/a through < 4.2.0.

  5. CVE-2025-62036 7.1 Élevée

    uxper Togo

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  6. CVE-2025-62035 8.8 Élevée

    uxper Togo

    Deserialization of Untrusted Data vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  7. CVE-2025-62034 8.8 Élevée

    uxper Togo

    Incorrect Privilege Assignment vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

  8. CVE-2025-59556 7.1 Élevée

    skygroup GoStore

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

  9. CVE-2025-58964 7.1 Élevée

    skygroup Enzy

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

  10. CVE-2025-58629 7.5 Élevée

    kamleshyadav Miraculous

    Missing Authorization vulnerability in kamleshyadav Miraculous miraculous allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Miraculous: from n/a through < 2.0.9.

  11. CVE-2025-48090 8.1 Élevée

    CocoBasic Blanka - One Page WordPress Theme

    Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5.

  12. CVE-2025-39463 7.5 Élevée

    Select-Themes Dessau

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9.