CVE-2026-62064

The Ambed WordPress theme (versions

CVE-2026-62064 WordPress Ambed theme <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Ambed = 1.0.0 versions...

CVE-2026-62065 WordPress Cardea theme <= 2.3 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Cardea = 2.3 versions...

CVE-2026-62052

The Tipsy theme for WordPress (versions

CVE-2026-62050 WordPress Splendour theme <= 1.23 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Splendour = 1.23 versions...

CVE-2026-62051 WordPress Stargaze theme <= 1.10 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Stargaze = 1.10 versions...

CVE-2026-62051

The Stargaze theme for WordPress (versions

CVE-2026-62020

The WordPress TouchUp theme (versions prior to 1.4 ) is vulnerable to an unauthenticated Local File Inclusion (LFI) . This vulnerability is associated with CWE-98 , involving improper control of filenames in PHP include/require statements. The impact of successful exploitation is rated as High , ...

CVE-2026-48194

The DukaMarket WordPress theme (versions

CVE-2026-42777 WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Aalto = 1.8 versions...

CVE-2026-42777

The WordPress Aalto theme (versions

CVE-2026-42705

The WordPress Grand News theme (versions

CVE-2026-42693

The Jannah WordPress theme (versions

CVE-2026-42693 WordPress Jannah theme <= 7.6.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Jannah = 7.6.5 versions...

CVE-2026-57806

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...

CVE-2026-57806

The drfuri Martfury - WooCommerce Marketplace WordPress Theme is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. This issue affects versions up to and including 3.3.9 . An attacker could exploit this to execute maliciou...

EUVD-2026-96398

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...

CVE-2026-57806 WordPress Martfury - WooCommerce Marketplace WordPress theme theme <= 3.3.9 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in drfuri Martfury - WooCommerce Marketplace WordPress Theme martfury allows Reflected XSS.This issue affects Martfury - WooCommerce Marketplace WordPress Theme: from n/a through 3.3.9...

CVE-2026-94160

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allows Reflected XSS.This issue affects ThemeStek Extras for LabtechCO Theme: from n/a through 8.4...

EUVD-2026-96375

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allows Reflected XSS.This issue affects ThemeStek Extras for LabtechCO Theme: from n/a through 8.4...