Approved changes feed: RSS · Atom

cpe:2.3:a:qodeinteractive:wellspring:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorQodeinteractive (841842fd-de2a-5b7d-9631-e9390eea1fb6)
ProductWellspring (70173dd4-598f-550c-a490-f04b046148cd)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-67934 vulnerable 2026-06-03 15:11:02.527292 WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability
HIGH (8.1)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring allows PHP Local File Inclusion.This issue affects Wellspring: from n/a through < 2.8.
Published: 2026-01-08T09:17:49.408Z
Updated: 2026-04-28T16:14:24.212Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.