Elated-Themes vulnerabilities
Published CVEs affecting Elated-Themes products: 56 record(s), with severity, exploitation and fixes.
Search & Go 3The Aisle 2Askka 2Laurent 2Sweet Jane 2Roisin 2Töbel 2Måne 2NeoBeat 2Aperitif 2Laurent Core 1Léonie 1Lella 1Gaspard 1The Aisle Core 1Gioia 1Verdure Core 1Ambient 1Search & Go - Directory WordPress Theme 1Frappé 1Savory 1Academist 1Neo Ocular 1Audrey 1Flow 1Vino 1Solene 1Helvig 1Zentrum 1Etchy 1FindAll 1Amoli 1Leroux 1FindAll Listing 1FindAll Membership 1Elated Membership 1Elated Listing 1Fidalgo 1Malmö 1Mr. SEO 1
CVE-2026-66566
High · 8.1
CWE-98 Oct 10, 2026
WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-78478
High · 8.1
CWE-98 Aug 25, 2026
Måne <= 1.7 - Unauthenticated Local File Inclusion
The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
CVE-2026-66671
High · 8.1
CWE-98 Aug 24, 2026
WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVE-2026-66670
High · 8.1
CWE-98 Aug 24, 2026
WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
CVE-2026-65481
High · 7.5
CWE-98 Jul 23, 2026
WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability
Contributor Local File Inclusion in Vino <= 1.9 versions.
CVE-2026-57793
High · 7.5
CWE-98 Jul 13, 2026
WordPress Flow theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion.This issue affects Flow: from n/a through <= 1.8.
CVE-2026-42382
High · 8.1
CWE-98 Jul 2, 2026
WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.
CVE-2026-39576
High · 8.1
CWE-502 Jun 17, 2026
WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions.
CVE-2026-39556
High · 8.1
CWE-502 Jun 17, 2026
WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Konsept <= 1.9 versions.
CVE-2026-39523
High · 8.1
CWE-98 Jun 17, 2026
WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions.
CVE-2026-40758
High · 8.1
CWE-502 Jun 17, 2026
WordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
CVE-2026-40754
High · 8.1
CWE-502 Jun 17, 2026
WordPress Roisin theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.
CVE-2026-39578
Medium · 5.5
CWE-502 Jun 17, 2026
WordPress Valiance theme <= 1.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.
CVE-2026-39577
Medium · 5.5
CWE-502 Jun 17, 2026
WordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.
CVE-2026-39568
High · 8.1
CWE-98 Jun 17, 2026
WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.
CVE-2026-39558
High · 8.1
CWE-98 Jun 17, 2026
WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.
CVE-2026-39557
High · 8.1
CWE-502 Jun 17, 2026
WordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.
CVE-2026-39554
High · 8.1
CWE-502 Jun 17, 2026
WordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.
CVE-2026-39549
High · 8.1
CWE-98 Jun 17, 2026
WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.
CVE-2026-39522
High · 8.1
CWE-98 Jun 17, 2026
WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Solene <= 3.4 versions.
CVE-2026-39555
High · 8.1
CWE-502 Jun 2, 2026
WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.
This issue affects Askka: from n/a through 1.3.1.
CVE-2026-39551
High · 8.1
CWE-502 Jun 2, 2026
WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection.
This issue affects Töbel: from n/a through 1.8.1.
CVE-2026-39550
High · 8.1
CWE-502 Jun 2, 2026
WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection.
This issue affects Aperitif: from n/a through 1.6.
CVE-2026-32507
Medium · 5.4
CWE-502 Mar 25, 2026
WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4.
CVE-2026-27048
High · 8.1
CWE-98 Mar 25, 2026
WordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The Aisle Core: from n/a through <= 2.0.5.