cbcvebase.

The Wound Project The Wound vulnerabilities

1 known vulnerability affecting the_wound_project/the_wound.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2025-2558P2HIGHCVSS 8.6PoC≤ 0.0.12025-04-24
CVE-2025-2558 [HIGH] CWE-22 CVE-2025-2558: The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to gener The-wound WordPress theme through 0.0.1 does not validate some parameters before using them to generate paths passed to include function/s, allowing unauthenticated users to perform LFI attacks and download arbitrary file from the server
nvd