Brandexponents

6 CVEs across 5 Brandexponents products. Browse Brandexponents vulnerabilities, severities, and proof-of-concept exploits.

Brandexponents products with known CVEs

ProductCVEs
Oshine Modules2
Oshine1
Oshine Core1
Tatsu1
Type Hub1
Brandexponents CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66665Critical10.02026-08-06Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.
CVE-2025-14359High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in brandexponents Oshine allows PHP Local…
CVE-2025-58660Medium5.42025-09-22Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…
CVE-2024-44044High7.12025-02-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandexponents Oshine Modules oshine-modules allows Refle…
CVE-2024-44055Medium5.42025-01-31Server-Side Request Forgery (SSRF) vulnerability in brandexponents Oshine Modules oshine-modules.This issue affects Oshine Modules: from n/a through < 3.3.8.
CVE-2021-25094High8.12022-04-25The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under…