CVE Intelligence

Mikado-Themes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Mikado-Themes products: 78 record(s), with severity, exploitation and fixes.

PawFriends - Pet Shop and Veterinary WordPress Theme 3Wanderland 3FiveStar 2Curly 2Overton 2Rosebud 2LuxeDrive 2Powerlift 2Mikado Core 2Innovio 2Verdure 2Dolcino 2Justicia 2Holmes 2Cocco 2Fleur 2Fiorello 2Dør 2Biagiotti Core 1HealthFirst 1Roam 1Amfissa 1Curly Core 1Emaurri 1TouchUp 1Deston 1Belfort 1MultiOffice 1Foton Core 1Backpack Traveler 1Lekker 1Bard 1Hendon 1Optimize 1Wellspring 1Wilmër 1ChapterOne 1Aviana 1Cortex 1Evently 1

Exploited only (KEV) →

CVE-2026-62020 High · 8.1 CWE-98 Oct 10, 2026
WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.
CVE-2026-66657 High · 8.1 CWE-98 Aug 13, 2026
WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
CVE-2026-66656 High · 8.1 CWE-98 Aug 13, 2026
WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
CVE-2026-57792 High · 7.5 CWE-98 Jul 13, 2026
WordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.1.
CVE-2026-52707 High · 8.1 CWE-35 Jun 17, 2026
WordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
CVE-2026-40757 High · 8.1 CWE-502 Jun 17, 2026
WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.
CVE-2026-40756 High · 8.1 CWE-502 Jun 17, 2026
WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Zoya <= 1.4 versions.
CVE-2026-40733 High · 8.1 CWE-502 Jun 17, 2026
WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.
CVE-2026-40759 High · 8.1 CWE-502 Jun 17, 2026
WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.
CVE-2026-40755 High · 8.1 CWE-502 Jun 17, 2026
WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.
CVE-2026-40753 High · 8.1 CWE-502 Jun 17, 2026
WordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.
CVE-2026-40751 High · 8.1 CWE-502 Jun 17, 2026
WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
CVE-2026-40739 High · 8.1 CWE-502 Jun 17, 2026
WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.
CVE-2026-40731 High · 8.1 CWE-98 Jun 17, 2026
WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.
CVE-2026-39537 High · 8.1 CWE-98 Jun 17, 2026
WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.
CVE-2026-39538 High · 7.5 CWE-98 Apr 8, 2026
WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File Inclusion.This issue affects Mikado Core: from n/a through <= 1.6.
CVE-2026-32511 Medium · 5.4 CWE-502 Mar 25, 2026
WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7.
CVE-2026-32508 Medium · 5.4 CWE-502 Mar 25, 2026
WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.
CVE-2026-27081 High · 8.1 CWE-98 Mar 25, 2026
WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusion.This issue affects Rosebud: from n/a through <= 1.4.
CVE-2026-27080 High · 8.1 CWE-98 Mar 25, 2026
WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion.This issue affects Deston: from n/a through <= 1.0.
CVE-2026-27079 High · 8.1 CWE-98 Mar 25, 2026
WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusion.This issue affects Amfissa: from n/a through <= 1.1.
CVE-2026-27078 High · 8.1 CWE-98 Mar 25, 2026
WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows PHP Local File Inclusion.This issue affects Emaurri: from n/a through <= 1.0.1.
CVE-2026-27077 High · 8.1 CWE-98 Mar 25, 2026
WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice allows PHP Local File Inclusion.This issue affects MultiOffice: from n/a through <= 1.2.
CVE-2026-27076 High · 8.1 CWE-98 Mar 25, 2026
WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through <= 1.0.
CVE-2026-27075 High · 8.1 CWE-98 Mar 25, 2026
WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows PHP Local File Inclusion.This issue affects Belfort: from n/a through <= 1.0.