19594 matches found
CVE-2026-27334 WordPress Alchemists theme <= 4.6.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in danfisher Alchemists alchemists allows PHP Local File Inclusion.This issue affects Alchemists: from n/a through = 4.6.0...
CVE-2026-27326
CVE-2026-27326 affects the AC Services | HVAC WordPress theme (window-ac-services), with Improper Handling of Include/Require in PHP leading to Local File Inclusion. Public reports (Wordfence) indicate the issue exists for theme versions up to 1.2.5 and is currently Unpatched. Affected component ...
CVE-2026-27332 WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through 1.4.0...
CVE-2026-27326
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This issue affects AC Services | HVAC, Air...
CVE-2026-27097 WordPress CasaMia | Property Rental Real Estate WordPress Theme theme <= 1.1.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Them...
CVE-2026-27097
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes CasaMia | Property Rental Real Estate WordPress Theme casamia allows PHP Local File Inclusion.This issue affects CasaMia | Property Rental Real Estate WordPress Them...
CVE-2026-27098
CVE-2026-27098 affects the WordPress theme Au Pair Agency - Babysitting & Nanny Theme (
CVE-2026-24960
CVE-2026-24960 is a WordPress vulnerability in the zozothemes Charety theme (versions
CVE-2026-24960 WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through 2.0.2...
CVE-2026-24960 WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability
Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through 2.0.2...
CVE-2026-23801
CVE-2026-23801 affects The Issue WordPress theme (<= 1.6.11): Local File Inclusion via improper control of filenames in Include/Require (PHP Remote File Inclusion). CVSS v3.1 base score 8.1 (HIGH, network, no user interaction). Red Hat/NVD/patchstack entries confirm the issue and note the fix;...
CVE-2026-22501 WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through = 1.3.2...
CVE-2026-23801 WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusion.This issue affects The Issue: from n/a through = 1.6.11...
CVE-2026-23546
Insertion of Sensitive Information Into Sent Data vulnerability in RadiusTheme Classified Listing classified-listing allows Retrieve Embedded Sensitive Data.This issue affects Classified Listing: from n/a through = 5.3.4...
CVE-2026-22501 WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through = 1.3.2...
CVE-2026-23801 WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusion.This issue affects The Issue: from n/a through = 1.6.11...
CVE-2026-22501
CVE-2026-22501 describes a deserialization of untrusted data vulnerability in the WordPress theme/or plugin set; specifically the Mounthood theme is affected up to version 1.3.2, with a PHP Object Injection flaw exposed via untrusted data deserialization. The attack surface is the Mounthood mount...
CVE-2026-22497
CVE-2026-22497 describes a Deserialization of Untrusted Data vulnerability in the WordPress theme Jardi (AncoraThemes) up to version 1.7.2. The connected documents confirm the issue is a PHP Object Injection flaw triggered by untrusted data deserialization, affecting Jardi versions
CVE-2026-22477
CVE-2026-22477 is a Local File Inclusion for the WordPress theme Felizia (AncoraThemes) and affects Felizia versions up to 1.3.4. The vulnerability arises from improper control of the filename used in PHP include/require, enabling local file inclusion. The NVD entry lists CVSS v3.1 base score 8.1...
CVE-2026-22476
CVE-2026-22476 describes a Local File Inclusion vulnerability in the WordPress theme “Etchy” by Elated-Themes, affecting versions up to 1.0. The issue is rooted in improper control of the filename used in PHP include/require statements, enabling local file inclusion via PHP. Connected sources (Wo...