CVE-2026-78562Exploitation status Not confirmed Fix Not confirmed Affected product Not confirmed Published 08/25/2026 Severity Unknown CVE-2026-66657WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product B Biagiotti Core Published 08/13/2026 Severity High CVE-2026-66656WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Foton Core Published 08/13/2026 Severity High CVE-2026-57792WordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product D Dør Published 07/13/2026 Severity High CVE-2026-52707WordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product K Kastell Published 06/17/2026 Severity High CVE-2026-40757WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product C Château Published 06/17/2026 Severity High CVE-2026-40756WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product Z Zoya Published 06/17/2026 Severity High CVE-2026-40733WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product S ShiftUp Published 06/17/2026 Severity High CVE-2026-40753WordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product E EasyMeals Published 06/17/2026 Severity High CVE-2026-40731WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C ChapterOne Published 06/17/2026 Severity High CVE-2026-39537WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Mikado Core Published 06/17/2026 Severity High CVE-2026-40759WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product E Esmée Published 06/16/2026 Severity High CVE-2026-40755WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product T TechLink Published 06/16/2026 Severity High CVE-2026-40751WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product A Ashtanga Published 06/16/2026 Severity High CVE-2026-40739WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability Exploitation status Not known exploited Fix YesAffected product L LuxeDrive Published 06/16/2026 Severity High CVE-2026-39538WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Mikado Core Published 04/08/2026 Severity High CVE-2026-32511WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability Exploitation status Not known exploited Fix YesAffected product S Stål Published 03/25/2026 Severity Medium CVE-2026-32508WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability Exploitation status Not known exploited Fix YesAffected product H Halstein Published 03/25/2026 Severity Medium CVE-2026-27081WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product R Rosebud Published 03/25/2026 Severity High CVE-2026-27080WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product D Deston Published 03/25/2026 Severity High CVE-2026-27079WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Amfissa Published 03/25/2026 Severity High CVE-2026-27078WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product E Emaurri Published 03/25/2026 Severity High CVE-2026-27077WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M MultiOffice Published 03/25/2026 Severity High CVE-2026-27076WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L LuxeDrive Published 03/25/2026 Severity High CVE-2026-27075WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product B Belfort Published 03/25/2026 Severity High CVE-2026-27047WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Curly Core Published 03/25/2026 Severity High CVE-2026-27342WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T TopFit - Fitness and Gym WordPress Theme Published 03/05/2026 Severity High CVE-2026-27341WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product T TopScorer - Sports WordPress Theme Published 03/05/2026 Severity High CVE-2026-22457WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product W Wanderland Published 03/05/2026 Severity High CVE-2026-22429WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product V Verdure Published 03/05/2026 Severity High CVE-2026-22427WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product G GoTravel Published 03/05/2026 Severity High CVE-2026-22414WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Marra Published 03/05/2026 Severity High CVE-2026-22413WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product M Malgré Published 03/05/2026 Severity High CVE-2026-22412WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product E Eona Published 03/05/2026 Severity High CVE-2026-22410WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product D Dolcino Published 03/05/2026 Severity High CVE-2026-22408WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product J Justicia Published 03/05/2026 Severity High CVE-2026-22405WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product O Overton Published 03/05/2026 Severity High CVE-2026-22403WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product I Innovio Published 03/05/2026 Severity High CVE-2026-22399WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Holmes Published 03/05/2026 Severity High CVE-2026-22397WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Fleur Published 03/05/2026 Severity High CVE-2026-22395WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Fiorello Published 03/05/2026 Severity High CVE-2026-22394WordPress Evently theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product E Evently Published 03/05/2026 Severity High CVE-2026-22392WordPress Cortex theme <= 1.9 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Cortex Published 03/05/2026 Severity High CVE-2026-22389WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Cocco Published 03/05/2026 Severity High CVE-2026-22387WordPress Aviana theme <= 2.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product A Aviana Published 03/05/2026 Severity High CVE-2026-22383WordPress PawFriends - Pet Shop and Veterinary WordPress theme theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product P PawFriends - Pet Shop and Veterinary WordPress Theme Published 02/20/2026 Severity High CVE-2026-22381WordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P PawFriends - Pet Shop and Veterinary WordPress Theme Published 02/20/2026 Severity High CVE-2026-22344WordPress FiveStar theme <= 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F FiveStar Published 02/20/2026 Severity High CVE-2025-69408WordPress HealthFirst theme <= 1.0.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H HealthFirst Published 02/20/2026 Severity High CVE-2026-24631WordPress Rosebud theme <= 1.4 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product R Rosebud Published 01/23/2026 Severity Medium CVE-2026-22458WordPress Wanderland theme <= 1.5 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product W Wanderland Published 01/22/2026 Severity Medium CVE-2026-22430WordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product V Verdure Published 01/22/2026 Severity Medium CVE-2026-22411WordPress Dolcino theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product D Dolcino Published 01/22/2026 Severity Medium CVE-2026-22409WordPress Justicia theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product J Justicia Published 01/22/2026 Severity Medium CVE-2026-22407WordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product R Roam Published 01/22/2026 Severity Medium CVE-2026-22406WordPress Overton theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product O Overton Published 01/22/2026 Severity Medium CVE-2026-22404WordPress Innovio theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product I Innovio Published 01/22/2026 Severity Medium CVE-2026-22400WordPress Holmes theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product H Holmes Published 01/22/2026 Severity Medium CVE-2026-22398WordPress Fleur theme <= 2.0 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product F Fleur Published 01/22/2026 Severity Medium CVE-2026-22396WordPress Fiorello theme <= 1.0 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product F Fiorello Published 01/22/2026 Severity Medium CVE-2026-22393WordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product C Curly Published 01/22/2026 Severity Medium CVE-2026-22391WordPress Cocco theme <= 1.5.1 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product C Cocco Published 01/22/2026 Severity Medium CVE-2026-22382WordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product P PawFriends - Pet Shop and Veterinary WordPress Theme Published 01/22/2026 Severity Medium CVE-2025-67940WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product P Powerlift Published 01/22/2026 Severity High CVE-2025-67938WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product B Biagiotti Published 01/22/2026 Severity High CVE-2025-54003WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product D Depot Published 01/22/2026 Severity High CVE-2025-67937WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product H Hendon Published 01/08/2026 Severity High CVE-2025-67936WordPress Curly theme < 3.3 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product C Curly Published 01/08/2026 Severity High CVE-2025-67935WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product O Optimize Published 01/08/2026 Severity High CVE-2025-67934WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product W Wellspring Published 01/08/2026 Severity High CVE-2025-69034WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product L Lekker Published 12/30/2025 Severity High CVE-2025-69032WordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product F FiveStar Published 12/30/2025 Severity Medium CVE-2025-69030WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability Exploitation status Not known exploited Fix YesAffected product B Backpack Traveler Published 12/30/2025 Severity Medium CVE-2025-67515WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product W Wilmër Published 12/09/2025 Severity High CVE-2025-66532WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability Exploitation status Not known exploited Fix YesAffected product P Powerlift Published 12/09/2025 Severity Medium CVE-2025-39467WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product W Wanderland Published 11/06/2025 Severity High CVE-2025-39466WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product D Dør Published 11/06/2025 Severity High CVE-2025-64368WordPress Bard theme <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability Exploitation status Not known exploited Fix YesAffected product B Bard Published 10/31/2025 Severity Medium CVE-2025-49295WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product M MediClinic Published 06/09/2025 Severity High CVE-2025-49296WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product G GrandPrix Published 06/09/2025 Severity High CVE-2025-49297WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product G Grill and Chow Published 06/09/2025 Severity High CVE-2025-39490WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product B Backpack Traveler Published 05/23/2025 Severity High CVE-2025-39494WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability Exploitation status Not known exploited Fix YesAffected product W Wilmër Published 05/23/2025 Severity High CVE-2025-39458WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability Exploitation status Not known exploited Fix YesAffected product F Foton Published 05/19/2025 Severity High CVE-2024-12287Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user Exploitation status Not known exploited Fix YesAffected product B Biagiotti Membership Published 12/18/2024 Severity Critical