These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2025-69121 is a HIGH severity vulnerability (CVSS Score: 8.1) in the Deliciosa theme, affecting versions up to 1.10.0. This vulnerability allows unauthenticated local file inclusion, potentially enabling attackers to access sensitive files. The vulnerability was published on June 17, 2026, and last modified on the same day. Users of the Deliciosa theme should take immediate action to mitigate this risk.
CVE-2025-69119 is an Unauthenticated Local File Inclusion vulnerability in Corbesier theme versions <= 1.15.0. The CVSS score is 8.1, indicating a HIGH severity level. This vulnerability allows unauthenticated attackers to include local files, potentially leading to code execution or information disclosure. Users of Corbesier theme version 1.15.0 or earlier should prioritize updating to a patched version [truncated]
CVE-2025-69118 is a high-severity vulnerability in the CopyPress WordPress theme, with a CVSS score of 8.1. The vulnerability allows unauthenticated attackers to include local files, potentially leading to code execution, data breaches, or other malicious activities. This vulnerability was published on June 17, 2026, and immediately gained attention due to its high severity and potential impact. Users of [truncated]
CVE-2025-69117 is an unauthenticated local file inclusion vulnerability in Ingenioso versions <= 1.14.0. The vulnerability has a CVSS score of 8.1 and is classified as HIGH severity. This type of vulnerability could allow an attacker to access sensitive files on the system, potentially leading to unauthorized data disclosure or system compromise. Users of Ingenioso versions <= 1.14.0 should be aware of th [truncated]
CVE-2025-69116 is a high-severity vulnerability in the Iona theme, affecting versions <= 1.0.8. This vulnerability allows unauthenticated local file inclusion, with a CVSS score of 8.1. The vulnerability was published on June 17, 2026, and last modified on the same day. The vendor and product information are not confirmed, with a low confidence level. Users of the Iona theme should take immediate action t [truncated]
CVE-2025-69114 is an Unauthenticated Local File Inclusion vulnerability affecting MaxiNet versions less than or equal to 1.2.10. The vulnerability has a CVSS score of 8.1 and is classified as HIGH severity. This type of vulnerability could allow an attacker to access sensitive files on the system, potentially leading to unauthorized data disclosure or system compromise. Users of MaxiNet versions less than [truncated]
CVE-2025-69113 is a high-severity vulnerability (CVSS Score: 8.1) affecting Nexio versions <= 1.10.0. This vulnerability allows unauthenticated local file inclusion, potentially leading to sensitive information disclosure and system compromise. The vulnerability was published on June 17, 2026, and immediately gained attention due to its high severity and potential impact. Users of affected Nexio versions [truncated]
CVE-2025-69112 is a HIGH severity vulnerability (CVSS Score: 8.1) in the Planty theme, affecting versions up to 1.14.0. This vulnerability allows unauthenticated local file inclusion. The CVE was published on 2026-06-17T13:19:17.100Z and last modified on 2026-06-17T14:45:15.717Z. Users of the affected theme should take immediate action to mitigate potential risks.
CVE-2025-69110 is an Unauthenticated Local File Inclusion vulnerability in AirSupply theme versions <= 2.0.0. The vulnerability has a CVSS score of 8.1 and is classified as HIGH. The CVSS vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. The weakness is CWE-98. Users of AirSupply theme versions <= 2.0.0 should be aware of this vulnerability and take necessary actions to protect their systems. The CV [truncated]
CVE-2025-69109 is a high-severity unauthenticated local file inclusion vulnerability in Raider Spirit theme versions <= 1.1.2. The vulnerability allows attackers to include local files without authentication, potentially leading to sensitive information disclosure or code execution. Users of Raider Spirit theme version 1.1.2 or earlier should prioritize patching this vulnerability to prevent potential fil [truncated]
CVE-2025-69108 is a critical vulnerability in the Hot Coffee theme, affecting versions up to 1.7. This vulnerability allows for unauthenticated PHP object injection, posing a significant risk to affected systems. With a CVSS score of 9.8, it is considered highly severe. The vulnerability was published on June 17, 2026, and last modified on the same day. Users of the Hot Coffee theme should take immediate [truncated]
CVE-2025-69107 is a high-severity Unauthenticated Local File Inclusion vulnerability in the Rosaleen theme, affecting versions <= 2.8. The vulnerability has a CVSS score of 8.1. This type of vulnerability allows unauthenticated attackers to include local files, potentially leading to code execution or information disclosure. Users of the Rosaleen theme version 2.8 or earlier should prioritize patching thi [truncated]
CVE-2025-69105 is an Unauthenticated Local File Inclusion vulnerability in Modernee theme versions <= 1.6.0. The vulnerability has a CVSS score of 8.1 and is classified as HIGH severity. The CVSS vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. Administrators and users of Modernee theme version 1.6.0 or earlier should prioritize patching to prevent potential local file inclusion attacks. The CVE re [truncated]
CVE-2025-58954 is a high-severity vulnerability in the HomeRoofer theme, version 2.11.0 or earlier. The vulnerability is an unauthenticated local file inclusion issue, which could allow attackers to access sensitive files on the server. This vulnerability was published on June 17, 2026, and has a CVSS score of 8.1, indicating a high level of severity. Organizations using the affected version of HomeRoofer [truncated]
CVE-2025-58953 is a HIGH severity vulnerability (CVSS Score: 8.1) affecting Joly theme versions <= 1.22.0. This vulnerability allows unauthenticated local file inclusion. The CVE was published on 2026-06-17T13:19:14.653Z and last modified on 2026-06-17T17:16:38.647Z. Users of the affected Joly theme versions should take immediate action to mitigate this vulnerability.
CVE-2025-58952 is a high-severity vulnerability in the Neuronet theme, with a CVSS score of 8.1. It allows unauthenticated attackers to include local files, potentially leading to code execution, data breaches, or system compromise. The vulnerability affects Neuronet versions prior to 1.14.0. Organizations using affected versions should prioritize patching. The CVE was published on June 17, 2026, and has [truncated]
A critical vulnerability, CVE-2025-60205, was disclosed in ThemeREX Addons versions <= 2.36.1.1, allowing unauthenticated PHP Object Injection. With a CVSS score of 9.8, this vulnerability poses a significant risk to affected installations. Organizations using this plugin should prioritize immediate action to mitigate potential exploitation. The vulnerability was made public on June 17, 2026, and no ranso [truncated]
A PHP Local File Inclusion vulnerability exists in the Hope charity-is-hope theme, affecting versions from n/a through 3.0.0. This issue allows for PHP Remote File Inclusion, posing a high severity risk with a CVSS score of 8.1. The vulnerability can lead to potential unauthorized file inclusion and execution, risk of elevated access and data exposure. Defenders and administrators using the Hope charity-i [truncated]