CVE Intelligence

Brandexponents vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Brandexponents products: 2 record(s), with severity, exploitation and fixes.

Oshine 1Oshine Core 1

Exploited only (KEV) →

CVE-2025-14359 High · 8.1 CWE-98 Jan 8, 2026
WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in brandexponents Oshine allows PHP Local File Inclusion. This issue affects Oshine: from n/a before 7.3.0.
CVE-2025-58660 Medium · 5.4 CWE-862 Sep 22, 2025
WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability
Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through <= 1.5.5.