TieLabs Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Jannah7 vulnerabilities
Jannah - Extensions1 vulnerability
Sahifa1 vulnerability

TieLabs vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2026-25464HIGH	WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.4. CWE-98Mar 25, 2026	CVSS8.1v3.1	EPSS0.403%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-64207HIGH	WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0. CWE-79Dec 18, 2025	CVSS7.1v3.1	EPSS0.191%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-64206CRITICAL	WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0. CWE-502Dec 18, 2025	CVSS9.8v3.1	EPSS0.409%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-64205HIGH	WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.0. CWE-98Dec 18, 2025	CVSS8.1v3.1	EPSS0.358%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2025-53334HIGH	WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through < 7.5.1. CWE-98Aug 28, 2025	CVSS8.1v3.1	EPSS0.421%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2021-24407MEDIUM	Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS) The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability. CWE-79Jul 6, 20211 related artifact	CVSS6.1v3.1	EPSS2.7%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX
CVE-2021-24364MEDIUM	Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS) The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS) vulnerability. CWE-79Jun 21, 20211 related artifact	CVSS6.1v3.1	EPSS1.98%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template	STIX