Skip to content
OpenAdvisories

Vendor

SpabRice

4 known vulnerabilities.

Products

Nyla 1 Vavo Core 1 Pond 1 Mogi 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-94066

    WordPress Pond theme <= 2.6.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond allows Reflected XSS.This issue affects Pond: from n/a through 2.6.1.

    SpabRice Pond
  • High 8.1
    CVE-2026-28570

    WordPress Vavo Core plugin <= 2.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions.

    SpabRice Vavo Core