WooThemes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH WooThemes CVE published 2026-10-22

CVE-2019-25779

CVE-2019-25779 WooThemes Diarise 1.5.9 Local File Disclosure via download.php allows unauthenticated attackers to read arbitrary files through the calendar parameter. This vulnerability enables attackers to access sensitive files, potentially leading to information disclosure. Defenders should assess exposure and prioritize patching to mitigate potential risks. The vulnerability was first observed by the [truncated]