CVE Intelligence

Edge-Themes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Edge-Themes products: 20 record(s), with severity, exploitation and fixes.

Aalto 2Alloggio - Hotel Booking 2Eldon 2Overworld 2Belletrist 1Gracey 1Reina 1Laurits 1Behold 1Valeska 1Haaken 1Cinerama 1Edge CPT 1Pelicula 1Archicon 1Kamperen 1

Exploited only (KEV) →

CVE-2026-42777 High · 8.1 CWE-98 Oct 10, 2026
WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.
CVE-2026-104747 High · 8.1 CWE-502 Oct 6, 2026
WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.
CVE-2026-57800 High · 7.5 CWE-98 Jul 13, 2026
WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5.
CVE-2026-57788 High · 7.5 CWE-98 Jul 13, 2026
WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.This issue affects Aalto: from n/a through <= 1.8.
CVE-2026-40738 High · 8.1 CWE-502 Jun 17, 2026
WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.
CVE-2026-40761 High · 8.1 CWE-502 Jun 17, 2026
WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.
CVE-2026-40760 High · 8.1 CWE-502 Jun 17, 2026
WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Behold <= 1.5 versions.
CVE-2026-40736 High · 8.1 CWE-502 Jun 17, 2026
WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.
CVE-2026-40735 High · 8.1 CWE-502 Jun 17, 2026
WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Reina <= 2.1 versions.
CVE-2026-39539 High · 8.1 CWE-502 Jun 17, 2026
WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.
CVE-2026-32512 Critical · 9.8 CWE-502 Mar 25, 2026
Edge-Themes Pelicula WordPress Theme: PHP Object Injection
Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a through < 1.10.
CVE-2026-32510 Medium · 5.4 CWE-502 Mar 25, 2026
WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3.
CVE-2026-32509 Medium · 5.4 CWE-502 Mar 25, 2026
WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4.
CVE-2026-32506 Medium · 5.4 CWE-502 Mar 25, 2026
WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7.
CVE-2025-69410 High · 8.1 CWE-98 Feb 20, 2026
WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2.
CVE-2025-69057 High · 8.1 CWE-98 Jan 22, 2026
WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through <= 1.0.
CVE-2025-69050 High · 8.1 CWE-98 Jan 22, 2026
WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.3.
CVE-2025-68987 High · 7.5 CWE-98 Dec 30, 2025
WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows PHP Local File Inclusion.This issue affects Cinerama: from n/a through <= 2.9.
CVE-2025-64287 High · 8.1 CWE-98 Nov 6, 2025
WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a through <= 1.8.
CVE-2025-62868 High · 8.1 CWE-98 Oct 24, 2025
WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4.