PT-2026-28024

Name of the Vulnerable Software and Affected Versions Kamperen versions prior to 1.3 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations At the moment, there is no information about a newer version that contains a f...

PT-2026-27980

Name of the Vulnerable Software and Affected Versions Mikado-Themes Rosebud versions through 1.4 Description A flaw exists in the handling of filenames used in include/require statements within the PHP code of Mikado-Themes Rosebud, leading to a PHP Local File Inclusion issue. This allows for the...

PT-2026-27865

Name of the Vulnerable Software and Affected Versions Elated Listing versions n/a through 1.4 Description A missing authorization flaw exists in Elated-Themes Elated Listing eltd-listing. This issue stems from incorrectly configured access control security levels, potentially allowing unauthorize...

PT-2026-28042

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in don-themes Riode riode allows Reflected XSS.This issue affects Riode: from n/a through 1.6.29...

PT-2026-27864

Name of the Vulnerable Software and Affected Versions Elated-Themes Search & Go versions n/a through 2.8 Description An incorrect privilege assignment issue exists in Elated-Themes Search & Go. This allows for privilege escalation. The issue affects the searchgo component. Recommendations Update ...

PT-2026-27975

Name of the Vulnerable Software and Affected Versions Mikado-Themes LuxeDrive versions n/a through 1.0 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program of Mikado-Themes LuxeDrive. This allows for PHP Local File Inclusion. The issue...

PT-2026-27967

Name of the Vulnerable Software and Affected Versions Mikado-Themes Curly Core versions through 2.1.6 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program, specifically in Mikado-Themes Curly Core. This allows for PHP Local File Inclusio...

PT-2026-28021

Name of the Vulnerable Software and Affected Versions Elated-Themes Leroux versions prior to 1.4 Description An issue exists in Elated-Themes Leroux that allows for object injection due to the deserialization of untrusted data. This impacts the software's ability to securely handle data input...

PT-2026-28025

Name of the Vulnerable Software and Affected Versions Mikado-Themes Stål versions prior to 1.7 Description The software contains a flaw due to deserialization of untrusted data, which can lead to object injection. This issue impacts the Stål component. Recommendations Update Mikado-Themes Stål to...

PT-2026-27953

Name of the Vulnerable Software and Affected Versions Mixtape versions n/a through 2.1 Description A flaw exists in how Mixtape handles filename control for include/require statements in PHP programs, leading to a PHP Local File Inclusion issue. This allows for the inclusion of local files...

PT-2026-27976

Name of the Vulnerable Software and Affected Versions Mikado-Themes MultiOffice versions n/a through 1.2 Description A flaw exists in the handling of filenames for include/require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes MultiOffice...

PT-2026-27977

Name of the Vulnerable Software and Affected Versions Mikado-Themes Emaurri versions through 1.0.1 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes Emaurri. This allows...

PT-2026-27979

Name of the Vulnerable Software and Affected Versions Mikado-Themes Deston versions n/a through 1.0 Description A flaw exists in the handling of filenames for include/require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Mikado-Themes Deston. This allows for P...

PT-2026-27820

Name of the Vulnerable Software and Affected Versions Laurent versions prior to 3.1 Description The software contains a flaw related to improper control of filename for include/require statements, specifically a PHP Local File Inclusion issue. This allows for the inclusion of local files within t...

PT-2026-28026

Name of the Vulnerable Software and Affected Versions Pelicula versions prior to 1.10 Description The Pelicula software contains a flaw related to the deserialization of untrusted data, which can lead to object injection. This issue impacts the pelicula-video-production-and-movie-theme...

PT-2026-27818

Name of the Vulnerable Software and Affected Versions AncoraThemes Greenville versions through 1.3.2 Description A flaw exists in the handling of filenames used in include/require statements within the PHP program AncoraThemes Greenville, leading to a PHP Local File Inclusion issue. This allows f...

PT-2026-27830

Name of the Vulnerable Software and Affected Versions Elated-Themes Gioia versions n/a through 1.4 Description The software contains a flaw due to improper control of filename handling for include/require statements. This results in a PHP Remote File Inclusion issue, specifically allowing PHP Loc...

PT-2026-28020

Name of the Vulnerable Software and Affected Versions Archicon versions prior to 1.7 Description A flaw exists in Archicon that allows for object injection due to deserialization of untrusted data. This issue impacts the software's ability to securely handle data, potentially leading to...

PT-2026-27826

Name of the Vulnerable Software and Affected Versions AncoraThemes Morning Records versions through 1.2 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations At the moment, there is no information about a newer versio...

PT-2026-27816

Name of the Vulnerable Software and Affected Versions Elated-Themes Gaspard versions n/a through 1.3 Description A flaw exists in the handling of filenames for Include/Require statements within a PHP program, specifically a PHP Remote File Inclusion issue in Elated-Themes Gaspard. This allows for...