Fuelthemes Werkstatt vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Fuelthemes Werkstatt: 5 record(s), with affected versions and fixes.

CVE-2026-94062 High · 8.1 CWE-98 Oct 9, 2026

WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3.

CVE-2026-57690 Medium · 4.3 CWE-352 Jul 2, 2026

WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.

CVE-2026-57689 Medium · 4.3 CWE-862 Jul 2, 2026

WordPress Werkstatt theme <= 4.7.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.

CVE-2026-27414 High · 8.8 CWE-502 Jul 2, 2026

WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.

CVE-2025-69314 High · 8.1 CWE-98 Jan 22, 2026

WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through < 4.8.3.