Skip to content
OpenAdvisories

Product · inc2734

Snow Monkey

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-10137

    Snow Monkey <= 29.1.5 - Unauthenticated Blind Server-Side Request Forgery

    The Snow Monkey theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 29.1.5 via the request() function. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originat…

    inc2734 Snow Monkey Web / CMS