Thembay Aora vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Thembay Aora: 3 record(s), with affected versions and fixes.
CVE-2026-66612
High · 7.1
CWE-79 Aug 20, 2026
WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.
CVE-2026-27381
High · 8.1
CWE-98 Mar 5, 2026
WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.
CVE-2025-68985
High · 7.5
CWE-98 Dec 30, 2025
WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.