PT-2026-23157

Name of the Vulnerable Software and Affected Versions Mikado-Themes Holmes versions through 1.7 Description A flaw exists in Mikado-Themes Holmes that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a PHP Remote File...

PT-2026-23172

Name of the Vulnerable Software and Affected Versions Select-Themes SetSail versions through 1.8 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusio...

PT-2026-23236

Name of the Vulnerable Software and Affected Versions Mikado-Themes TopFit - Fitness and Gym WordPress Theme versions through 1.9 Description The TopFit - Fitness and Gym WordPress Theme contains a flaw related to improper control of filename for include/require statements, specifically a PHP Loc...

PT-2026-23166

Name of the Vulnerable Software and Affected Versions FixTeam versions through 1.4 Description A flaw exists in FixTeam that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to a 'PHP Remote File Inclusion' condition...

PT-2026-23193

Name of the Vulnerable Software and Affected Versions AncoraThemes Handyman versions through 1.4 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. This impacts the handyman-services component. Recommendations At the moment, there...

PT-2026-23174

Name of the Vulnerable Software and Affected Versions Elated-Themes Sweet Jane versions through 1.2 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

PT-2026-23353

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in p-themes Porto porto allows Reflected XSS.This issue affects Porto: from n/a through = 7.6.2...

PT-2026-23156

Name of the Vulnerable Software and Affected Versions Mikado-Themes Fleur versions through 2.0 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusion...

PT-2026-23150

Name of the Vulnerable Software and Affected Versions Mikado-Themes Aviana versions through 2.1 Description A flaw exists in Mikado-Themes Aviana that allows for PHP Local File Inclusion due to improper control of filename for include/require statements. This issue is related to PHP Remote File...

PT-2026-23145

Name of the Vulnerable Software and Affected Versions don-themes Molla versions through 1.5.16 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local fil...

PT-2026-23164

Name of the Vulnerable Software and Affected Versions Mikado-Themes Marra versions through 1.2 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local fil...

PT-2026-23243

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in fox-themes Awa Plugins awa-plugins allows Reflected XSS.This issue affects Awa Plugins: from n/a through = 1.4.4...

PT-2026-23146

Name of the Vulnerable Software and Affected Versions BuddhaThemes WeDesignTech Ultimate Booking Addon versions through 1.0.3 Description An authorization issue exists in the WeDesignTech Ultimate Booking Addon, allowing exploitation due to incorrectly configured access control security levels...

PT-2026-23153

Name of the Vulnerable Software and Affected Versions Mikado-Themes Cortex versions through 1.5 Description The software contains an Improper Control of Filename for Include/Require Statement issue, also known as a PHP Remote File Inclusion. This allows for PHP Local File Inclusion. Recommendatio...

PT-2026-23260

Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through = 1.8...

PT-2026-23175

Name of the Vulnerable Software and Affected Versions Mikado-Themes GoTravel versions through 2.1 Description The GoTravel software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion ...

PT-2026-23151

Name of the Vulnerable Software and Affected Versions Mikado-Themes Cocco versions through 1.5.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File Inclusio...

PT-2026-23155

Name of the Vulnerable Software and Affected Versions Mikado-Themes Fiorello versions prior to 1.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Remote File Inclusion issue. This allows for PHP Local File...

📄 WonderCMS 3.4.2 Shell Upload

Proof of concept exploit for an authentication shell upload vulnerability in WonderCMS version 3.4.2. ============================================================================================================================================= | Title : WonderCMS 3.4.2 Authenticated file upload...

GHSA-CGC2-RCRH-QR5X Ghost Vulnerable to Remote Code Execution via Malicious Themes

Impact Specifically crafted malicious themes can execute arbitrary code on the server running Ghost. Vulnerable Versions This vulnerability is present in Ghost v0.7.2 to v6.19.0. Patches v6.19.1 contains a fix for this issue. Workarounds Ghost generally recommends users refrain from installing...