CVE-2025-24650: Themefic Tourfic

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in Themefic Tourfic tourfic allows Upload a Web Shell to a Web Server.This issue affects Tourfic: from n/a through <= 2.15.3.

Affected products

• Themefic Tourfic: before 2.15.4 (fixed in 2.15.4)

Published 2025-01-24. Last modified 2026-06-17.