Skip to content
OpenAdvisories

Vendor

Theme-Spirit

2 known vulnerabilities.

Products

Spirit Framework 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2025-10269

    Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion

    The Spirit Framework plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.13. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrary .php fil…

    Theme-Spirit Spirit Framework Web / CMS