plugin

Tiny Bootstrap Elements Light Vulnerabilities

1 known security issue reported for the Tiny Bootstrap Elements Light WordPress plugin. Most recent disclosed Sep 29, 2025.

1 high

Running Tiny Bootstrap Elements Light on your site? Check whether your installed version is affected.

Scan your site free

Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion

high

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code i...

CVSS:: 8.1
Affected:: up to 4.3.34
Fix:: No patched version reported
Disclosed:: Sep 29, 2025

CVE-2025-9991 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database