Thembay Urna vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Thembay Urna: 3 record(s), with affected versions and fixes.
CVE-2026-66610
High · 7.1
CWE-79 Aug 24, 2026
WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.
CVE-2025-67982
High · 8.1
CWE-98 Feb 20, 2026
WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.
CVE-2025-67528
High · 7.5
CWE-98 Dec 9, 2025
WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.