Opal WP vulnerabilities
Published CVEs affecting Opal WP products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-64637
Medium · 5.3
CWE-80 Jun 26, 2026
WordPress Auros Core plugin <= 5.3.1 - Content Injection vulnerability
Unauthenticated Content Injection in Auros Core <= 5.3.1 versions.
CVE-2025-67529
High · 7.5
CWE-98 Dec 9, 2025
WordPress Fashion theme < 5.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP Fashion fashion2 allows PHP Local File Inclusion.This issue affects Fashion: from n/a through < 5.3.0.
CVE-2025-67525
High · 7.5
CWE-98 Dec 9, 2025
WordPress ekommart theme < 4.3.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Opal_WP ekommart ekommart allows PHP Local File Inclusion.This issue affects ekommart: from n/a through < 4.3.1.