PoC Index85,101 CVEs with PoCs

CVE-2025-28915

WordPress ThemeEgg ToolKit plugin <= 1.2.9 - Arbitrary File Upload vulnerability

CRITICAL 9.1EPSS 1.3%

Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit allows Upload a Web Shell to a Web Server. This issue affects ThemeEgg ToolKit: from n/a through 1.2.9.

Affected
Theme Egg · ThemeEgg ToolKit
CVSS v3.1 PATCHSTACK
9.1 CRITICALCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS
1.30% chance of exploitation in the next 30 days, 70th percentile
Published
2025-03-11
Updated
2026-04-28

Proof-of-concept exploits (2)

References

Related