Multiple high-severity vulnerabilities have been discovered in various products, including Uniguest Tripleplay, Lucee, NotFound Ark Theme Core, and others. These vulnerabilities include remote code execution, privilege escalation, SQL injection, and PHP object injection, among others. Many of these vulnerabilities have a CVSS score of 9.8 or higher, indicating a high level of severity. The affected products include WordPress themes and plugins, Java-based web applications, and network devices. In some cases, the vulnerabilities can be exploited by unauthenticated attackers, while in others, authentication is required. The vulnerabilities can lead to arbitrary code execution, privilege escalation, and data tampering. Patches and updates have been released to address these vulnerabilities, and users are advised to apply them as soon as possible. Failure to do so can result in serious security consequences. The affected vendors include Uniguest, Lucee, NotFound, Fave Themes, Boceksoft Informatics, and many others. The vulnerabilities were discovered in March 2025, and users are urged to take immediate action to protect their systems.