Approved changes feed: RSS · Atom

cpe:2.3:a:teconcetheme:mayosis_core:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTeconcetheme (3ca16138-7f5c-56d2-be23-ba0c77775727)
ProductMayosis Core (cf9f26c4-a31a-519a-b088-0d92e00b333e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39655 vulnerable 2026-06-08 08:01:16.769075 WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7.
Published: 2026-05-26T06:50:08.757Z
Updated: 2026-05-26T10:48:10.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1565 vulnerable 2026-06-08 07:08:37.310134 Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read
HIGH (7.5)
The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
Published: 2025-04-25T09:21:41.127Z
Updated: 2026-04-08T17:18:00.600Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.