Whitebox-Studio vulnerabilities

Products

• Scape 2

Latest Whitebox-Studio CVEs

Newest publication first

1. CVE-2026-31913 WordPress Scape theme < 1.5.16 - Arbitrary File Deletion vulnerability

   Published 2026-03-25

   High·CVSS 8.6 EPSS 0.39%

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Whitebox-Studio Scape scape allows Path Traversal.This issue affects Scape: from n/a through < 1.5.16.

2. CVE-2025-60213 WordPress Scape theme <= 1.5.13 - PHP Object Injection vulnerability

   Published 2025-10-22

   Critical·CVSS 9.8 EPSS 0.58%

   Deserialization of Untrusted Data vulnerability in Whitebox-Studio Scape scape allows Object Injection.This issue affects Scape: from n/a through <= 1.5.13.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.