CVE Intelligence

Axiomthemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Axiomthemes products: 100 record(s), with severity, exploitation and fixes.

Smartseo 3Kicker 2777 2Agricola 2Aromatica 1The Gig 1Pubzinne 1Panda 1Soleil 1Tripster 1Ipharm 1Heartstar 1AI ANN 1Lione 1Spock 1Catamaran 1Athos 1Vocal 1Ecogrow 1Manufactory 1Lunna 1Dwell 1Fabric 1Basil 1Tacticool 1Amuli 1White Rabbit 1A.Williams 169 Clothing 1QuickCal - Appointment Booking Calendar for WordPress 1Spin 1Original 1Kids Care 1Veto 1Balance 1m2 | Construction and Tools Store 1FC United 1Rosalinda 1Reprizo 1Promo 1

Exploited only (KEV) →

CVE-2026-66569 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
CVE-2026-66568 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-66565 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVE-2026-42704 High · 8.1 CWE-98 Oct 10, 2026
WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
CVE-2026-93945 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
CVE-2026-93927 Critical · 9.8 CWE-502 Oct 10, 2026
WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.
CVE-2026-65581 Critical · 9.8 CWE-502 Aug 6, 2026
WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
CVE-2026-65579 Critical · 9.8 CWE-502 Aug 6, 2026
WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-65572 Critical · 9.8 CWE-502 Aug 6, 2026
WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
CVE-2026-65571 Critical · 9.8 CWE-502 Aug 6, 2026
WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.
CVE-2026-27377 Medium · 6.7 CWE-862 Jul 23, 2026
WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability
Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.
CVE-2026-57738 Critical · 9.8 CWE-502 Jul 13, 2026
WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0.
CVE-2026-22326 High · 8.1 CWE-98 Jun 17, 2026
WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.
CVE-2026-22325 High · 8.1 CWE-98 Jun 17, 2026
WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
CVE-2025-69369 High · 8.1 CWE-98 Jun 2, 2026
WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racquet: from n/a through 1.12.0.
CVE-2025-58897 High · 8.1 CWE-98 Jun 2, 2026
WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. This issue affects Fermentio: from n/a through 1.5.0.
CVE-2025-58707 High · 8.1 CWE-98 Jun 2, 2026
WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This issue affects Spin: from n/a through 1.8.
CVE-2025-58705 High · 8.1 CWE-98 Jun 2, 2026
WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12.
CVE-2025-53440 High · 8.1 CWE-98 Jun 2, 2026
WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Confidant: from n/a through 1.4.
CVE-2026-22500 Critical · 9.8 CWE-502 Mar 25, 2026
WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and Tools Store: from n/a through <= 1.1.2.
CVE-2026-28129 High · 8.1 CWE-98 Mar 5, 2026
WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.
CVE-2026-28119 High · 8.1 CWE-98 Mar 5, 2026
WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.
CVE-2026-28118 High · 8.1 CWE-98 Mar 5, 2026
WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4.
CVE-2026-28117 High · 8.1 CWE-98 Mar 5, 2026
WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.
CVE-2026-28079 High · 8.1 CWE-98 Mar 5, 2026
WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13.