520 matches found
CVE-2026-32434 WordPress VW Fitness theme <= 4.3.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in vowelweb VW Fitness vw-fitness allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VW Fitness: from n/a through = 4.3.4...
CVE-2026-32388 WordPress GLB theme <= 1.2.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GLB: from n/a through = 1.2.2...
CVE-2026-32345
CVE-2026-32345 relates to a Missing Authorization (Broken Access Control) vulnerability in the WordPress theme raratheme Perfect Portfolio, affecting Perfect Portfolio versions from n/a through 1.2.4. The available connected sources consistently describe a misconfigured access control but do not ...
CVE-2026-28107 WordPress Muzicon theme <= 1.9.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Muzicon muzicon allows PHP Local File Inclusion.This issue affects Muzicon: from n/a through = 1.9.0...
CVE-2026-28097 WordPress Artrium theme <= 1.0.14 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Artrium artrium allows PHP Local File Inclusion.This issue affects Artrium: from n/a through = 1.0.14...
CVE-2026-28086 WordPress Run Gran theme <= 2.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Run Gran run-gran allows PHP Local File Inclusion.This issue affects Run Gran: from n/a through = 2.0...
CVE-2026-28058 WordPress Dixon theme <= 1.4.2.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in ThemeREX Dixon dixon allows PHP Local File Inclusion.This issue affects Dixon: from n/a through = 1.4.2.1...
CVE-2026-28029
CVE-2026-28029 is a Local File Inclusion (LFI) vulnerability in the WordPress ThemeREX EmojiNation EmojiNation theme, due to improper control of the filename in PHP include/require statements. Affects EmojiNation versions from n/a up to and including 1.0.12. The Markdown-referenced sources descri...
CVE-2026-28031
CVE-2026-28031 is a Local File Inclusion in the WordPress theme Invetex (ThemeREX)
CVE-2026-27996
CVE-2026-27996 (WordPress Lingvico theme <= 1.0.14) is a Local File Inclusion (LFI) vulnerability caused by improper control of include/require filenames in PHP. Affected software is ThemeREX Lingvico Lingvico (WordPress theme) versions up to and including 1.0.14. The NVD entry and Red Hat/CVE...
CVE-2026-27375 WordPress Gecko theme <= 1.9.8 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JanStudio Gecko gecko allows Reflected XSS.This issue affects Gecko: from n/a through = 1.9.8...
CVE-2026-27337 WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress...
CVE-2026-27337 WordPress Chronicle - Lifestyle Magazine & Blog WordPress Theme theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Chronicle - Lifestyle Magazine & Blog WordPress Theme chronicle allows PHP Local File Inclusion.This issue affects Chronicle - Lifestyle Magazine & Blog WordPress...
CVE-2026-22476
CVE-2026-22476 describes a Local File Inclusion vulnerability in the WordPress theme “Etchy” by Elated-Themes, affecting versions up to 1.0. The issue is rooted in improper control of the filename used in PHP include/require statements, enabling local file inclusion via PHP. Connected sources (Wo...
CVE-2026-22465
CVE-2026-22465 is a Reflected XSS vulnerability in the WordPress theme BuddyApp (SeventhQueen BuddyApp) versions up to and including 1.9.2. The public details identify the affected software and the vulnerability type, with the issue described as improper input neutralization during web page gener...
CVE-2026-22439
CVE-2026-22439 covers an Local File Inclusion in the WordPress theme Green Planet by AncoraThemes, affecting versions up to and including 1.1.14. The issue is described as improper control of the filename for include/require statements in PHP, enabling inclusion of local files (PHP LFI). The CVSS...
CVE-2026-22418
CVE-2026-22418 affects the Great Lotus WordPress theme (versions up to and including 1.3.1). The issue is Local File Inclusion caused by improper control of the filename in PHP include/require statements. Public details indicate a high-severity impact (CVE CVSS score 8.1) with potential exposure ...
CVE-2026-22415 WordPress The Mounty theme <= 1.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes The Mounty the-mounty allows PHP Local File Inclusion.This issue affects The Mounty: from n/a through = 1.1...
WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Estate versions = 1.3.4...
WordPress Pets Club theme <= 2.3 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Pets Club versions = 2.3...