VYPR

Diarise

by Woothemes

CVEs (1)

  • CVE-2019-25779HigOct 22, 2026
    risk 0.49cvss 7.5epss —

    WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php. Attackers can send GET requests with file:// scheme paths to the calendar parameter to disclose…