CVE-2026-39522

CVE-2026-39522: WordPress Solene theme

CVE-2026-39522 WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Solene = 3.4 versions...

CVE-2026-39443 WordPress EmallShop theme <= 2.4.21 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in EmallShop = 2.4.21 versions...

CVE-2026-39446 WordPress Kapee theme < 1.7.0 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Kapee 1.7.0 versions...

CVE-2026-27429

CVE-2026-27429 concerns the WordPress Nifty theme (versions

CVE-2026-12256 WordPress Avada theme <= 3.15.3 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Avada = 3.15.3 versions...

CVE-2025-69176

Technical details about CVE-2025-69176 are not provided in the supplied documents. Monitor for updates; the initial entry notes unauthenticated Local File Inclusion in ITactics

CVE-2025-69177 WordPress Roneous theme <= 2.1.5 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Roneous = 2.1.5 versions...

CVE-2025-69168

CVE-2025-69168 affects the WordPress Spike theme up to version 1.2, with an unauthenticated Local File Inclusion vulnerability. The entry notes LFI without authentication, implying an attacker could access local files. The CVSS 3.1 data (Patchstack) assigns a base score of 8.1 (HIGH) with NETWORK...

CVE-2025-69168 WordPress Spike theme <= 1.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Spike = 1.2 versions...

CVE-2025-69167 WordPress Eros theme <= 1.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Eros = 1.3 versions...

CVE-2025-69165

CVE-2025-69165 affects WordPress Choreo theme versions

CVE-2025-69163

Technical details about CVE-2025-69163 (affected product/version, exploit specifics, remediation) are not provided in the connected documents. Monitor for updates and new public disclosures.

CVE-2025-69162 WordPress Grecko theme <= 5.17 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Grecko = 5.17 versions...

CVE-2025-69160 WordPress Gita theme <= 1.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Gita = 1.11 versions...

CVE-2025-69159 WordPress Printo theme <= 1.11 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Printo = 1.11 versions...

CVE-2025-69151 WordPress Grand Car Rental theme <= 3.7 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Grand Car Rental = 3.7 versions...

CVE-2025-69150

Technical details about CVE-2025-69150 are not provided in the connected documents. The initial description notes an unauthenticated Local File Inclusion in Medeus theme

CVE-2025-69150 WordPress Medeus theme <= 1.14 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Medeus = 1.14 versions...

CVE-2025-69146

Technical details for CVE-2025-69146 are not publicly provided in the supplied documents; no confirmed affected products, versions, or fixes are available here. Monitor official advisories for updates.