CVE Intelligence

BZOTheme vulnerabilities

🔔 Create alert RSS

Published CVEs affecting BZOTheme products: 2 record(s), with severity, exploitation and fixes.

Monki 1Mella 1

Exploited only (KEV) →

CVE-2025-67616 High · 8.1 CWE-98 Jan 22, 2026
WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Mella mella allows PHP Local File Inclusion.This issue affects Mella: from n/a through <= 1.2.29.
CVE-2025-53436 High · 8.1 CWE-98 Dec 18, 2025
WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Monki monki allows PHP Local File Inclusion.This issue affects Monki: from n/a through <= 2.0.5.