PT-2026-27980

Name of the Vulnerable Software and Affected Versions Mikado-Themes Rosebud versions through 1.4 Description A flaw exists in the handling of filenames used in include/require statements within the PHP code of Mikado-Themes Rosebud, leading to a PHP Local File Inclusion issue. This allows for the...

PT-2026-27865

Name of the Vulnerable Software and Affected Versions Elated Listing versions n/a through 1.4 Description A missing authorization flaw exists in Elated-Themes Elated Listing eltd-listing. This issue stems from incorrectly configured access control security levels, potentially allowing unauthorize...

PT-2026-27820

Name of the Vulnerable Software and Affected Versions Laurent versions prior to 3.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local files within t...

PT-2026-27953

Name of the Vulnerable Software and Affected Versions Mixtape versions n/a through 2.1 Description A flaw exists in how Mixtape handles filename control for include/require statements in PHP programs, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files...

PT-2026-27826

Name of the Vulnerable Software and Affected Versions AncoraThemes Morning Records versions through 1.2 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations At the moment, there is no information about a newer versio...

PT-2026-27976

Name of the Vulnerable Software and Affected Versions Mikado-Themes MultiOffice versions n/a through 1.2 Description A flaw exists in the handling of filenames for include/require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes MultiOffice...

PT-2026-27818

Name of the Vulnerable Software and Affected Versions AncoraThemes Greenville versions through 1.3.2 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program AncoraThemes Greenville, leading to a PHP Local File Inclusion issue. This allows f...

PT-2026-28020

Name of the Vulnerable Software and Affected Versions Archicon versions prior to 1.7 Description A flaw exists in Archicon that allows for object injection due to deserialization of untrusted data. This issue impacts the software's ability to securely handle data, potentially leading to...

PT-2026-27977

Name of the Vulnerable Software and Affected Versions Mikado-Themes Emaurri versions through 1.0.1 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes Emaurri. This allows...

PT-2026-27979

Name of the Vulnerable Software and Affected Versions Mikado-Themes Deston versions n/a through 1.0 Description A flaw exists in the handling of filenames for include/require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes Deston. This allows for P...

PT-2026-27816

Name of the Vulnerable Software and Affected Versions Elated-Themes Gaspard versions n/a through 1.3 Description A flaw exists in the handling of filenames for Include/Require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Elated-Themes Gaspard. This allows for...

PT-2026-28026

Name of the Vulnerable Software and Affected Versions Pelicula versions prior to 1.10 Description The Pelicula software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. This issue impacts the pelicula-video-production-and-movie-theme...

PT-2026-28021

Name of the Vulnerable Software and Affected Versions Elated-Themes Leroux versions prior to 1.4 Description An issue exists in Elated-Themes Leroux that allows for object injection due to the deserialization of untrusted data. This impacts the software's ability to securely handle data input...

PT-2026-28022

Name of the Vulnerable Software and Affected Versions Mikado-Themes Halstein versions prior to 1.8 Description An issue exists in Halstein that allows for object injection due to deserialization of untrusted data. This could potentially allow for malicious code execution. Recommendations Update...

PT-2026-28025

Name of the Vulnerable Software and Affected Versions Mikado-Themes Stål versions prior to 1.7 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. This issue impacts the Stål component. Recommendations Update Mikado-Themes Stål to...

PT-2026-27830

Name of the Vulnerable Software and Affected Versions Elated-Themes Gioia versions n/a through 1.4 Description The software contains a flaw due to improper control of filename handling for include/require statements. This results in a PHP Remote File Inclusion issue, specifically allowing PHP Loc...

PT-2026-27974

Name of the Vulnerable Software and Affected Versions Mikado-Themes Belfort versions n/a through 1.0 Description A flaw exists in the handling of filenames used in include/require statements within a PHP program, specifically a PHP Local File Inclusion issue in Mikado-Themes Belfort. This allows...

PT-2026-27833

Name of the Vulnerable Software and Affected Versions Elated-Themes Roisin versions through 1.2.1 Description The software contains a flaw related to improper control of filename handling for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local Fil...

PT-2026-27823

Name of the Vulnerable Software and Affected Versions AncoraThemes Mr. Cobbler versions n/a through 1.1.9 Description The software contains a flaw due to inadequate control of the filename for include/require statements in the PHP program, leading to a PHP Local File Inclusion issue. This allows...

PT-2026-27828

Name of the Vulnerable Software and Affected Versions AncoraThemes Beelove versions through 1.2.6 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations Update AncoraThemes Beelove to a version later than 1.2.6...