Skip to content
OpenAdvisories

Vendor

iThemes

3 known vulnerabilities.

Products

BackupBuddy 1 ServerBuddy by PluginBuddy.com 1 WPComplete 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2025-49895

    WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in iThemes ServerBuddy by PluginBuddy.Com allows Object Injection.This issue affects ServerBuddy by PluginBuddy.Com: from n/a through 1.0.5.

    iThemes ServerBuddy by PluginBuddy.com