Case-Themes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Case-Themes products: 3 record(s), with severity, exploitation and fixes.

Booked 1 Case Addons 1 Case Theme User 1

Exploited only (KEV) →

CVE-2025-5804 High · 7.5 CWE-98 Apr 10, 2026

WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through < 1.0.4.

CVE-2026-22341 Medium · 6.7 CWE-288 Feb 20, 2026

WordPress Booked plugin <= 3.0.0 - Account Takeover vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0.

CVE-2025-62047 Critical · 9.9 CWE-434 Nov 6, 2025

WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.