WordPress security by component
biolife
biolife is a WordPress theme with 4 published CVE records in this archive. The latest tracked vulnerability was published Oct 10, 2026; the highest published CVSS base score is 8.1.
Theme slug:
biolifeLatest vulnerability
CVE-2026-62096: Biolife: Filesystem traversal
An unauthenticated caller can influence a local file inclusion operation through attacker-controlled file selection. The export does not identify the endpoint, path parameter, inclusion function or reachable file paths. Code execution would require a suitable file and execution context; this record does not establish that complete chain. The vector requires high attack complexity, but the additional prerequisite is not disclosed. Affected versions: <= 3.2.3. No fixed release is confirmed.
| Safe version |
|
||
|---|---|---|---|
| Oct 10, 2026 |
CVE-2026-62096
Biolife: Filesystem traversal
An unauthenticated caller can influence a local file inclusion operation through attacker-controlled file selection. The export does not identify the endpoint, path parameter, inclusion function or reachable file paths. Code execution would require a suitable file and execution context; this record does not establish that complete chain. The vector requires high attack complexity, but the additional prerequisite is not disclosed. Affected versions: <= 3.2.3. No fixed release is confirmed.
|
See mitigation notes |
CVE8.1
|
| Oct 10, 2026 |
CVE-2026-62095
Biolife: Cross-site scripting
An unauthenticated caller can supply script-bearing input that is rendered without sufficient escaping. A victim must view the affected content or crafted request for JavaScript to execute in their browser. The export does not identify the endpoint, input field, rendering function or victim role; administrator takeover is not established. Whether the input is stored or reflected is not disclosed. Affected versions: <= 3.2.3. No fixed release is confirmed.
|
See mitigation notes |
CVE7.1
|
| Apr 08, 2026 |
CVE-2026-39624
Biolife: A security weakness
Biolife is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 3.2.3.
|
See mitigation notes |
CVE5.3
|
| Apr 08, 2026 |
CVE-2026-39623
Biolife: Filesystem traversal
Biolife is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server. The published affected range is <= 3.2.3.
|
See mitigation notes |
CVE7.5
|