CVE Intelligence

Vulnerabilidades de TieLabs

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de TieLabs: 7 registro(s), com severidade, exploração e correções.

Jannah 5Jannah - Extensions 1Sahifa 1

Somente exploradas (KEV) →

CVE-2026-42693 Alta · 7.1 CWE-79 10/10/2026
WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Jannah <= 7.6.5 versions.
CVE-2026-25464 Alta · 8.1 CWE-98 25/03/2026
WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.4.
CVE-2025-64207 Alta · 7.1 CWE-79 18/12/2025
WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64206 Crítica · 9.8 CWE-502 18/12/2025
WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64205 Alta · 8.1 CWE-98 18/12/2025
WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.0.
CVE-2025-64208 Média · 6.5 CWE-79 29/10/2025
WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through <= 1.1.4.
CVE-2025-64202 Média · 6.5 CWE-79 29/10/2025
WordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6.