Skip to content
OpenAdvisories

Product · TeconceTheme

Mayosis Core

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-32333

    WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

    TeconceTheme Mayosis Core
  • High 7.5
    CVE-2025-1565

    Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

    The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary …

    TeconceTheme Mayosis Core Web / CMS