Skip to content
OpenAdvisories

Vendor

beeteam368

8 known vulnerabilities.

Products

BeeTeam368 Extensions 3 VidMov 2 BeeTeam368 Extensions Pro 1 VidoRev Extensions 1 VidoRev 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2025-69373

    WordPress VidoRev theme <= 2.9.9.9.9.9.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidoRev vidorev allows PHP Local File Inclusion.This issue affects VidoRev: from n/a through <= 2.9.9.9.9.9.7.

    beeteam368 VidoRev
  • High 7.7
    CVE-2025-67914

    WordPress VidMov theme <= 2.3.8 - Path Traversal vulnerability

    Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8.

    beeteam368 VidMov
  • High 8.1
    CVE-2025-25172

    WordPress VidMov <= 1.9.4 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidMov vidmov allows PHP Local File Inclusion.This issue affects VidMov: from n/a through <= 1.9.4.

    beeteam368 VidMov
  • High 8.8
    CVE-2025-6423

    BeeTeam368 Extensions <= 2.3.5 - Authenticated (Subscriber+) Arbitrary File Upload

    The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5. This makes it possible for authenticated attack…

    beeteam368 BeeTeam368 Extensions Web / CMS
  • High 8.8
    CVE-2025-6381

    BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

    The BeeTeam368 Extensions plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_remove_temp_file() function. This makes it possible for authenticated attackers, with Subscriber-level access and ab…

    beeteam368 BeeTeam368 Extensions Web / CMS
  • High 8.8
    CVE-2025-6379

    BeeTeam368 Extensions Pro <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion

    The BeeTeam368 Extensions Pro plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.4 via the handle_live_fn() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, …

    beeteam368 BeeTeam368 Extensions Pro Web / CMS