CVE Intelligence

Select-Themes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Select-Themes products: 34 record(s), with severity, exploitation and fixes.

Prowess 3Struktur 3Don Peppe 2Stockholm Core 2Stockholm 2Select Core 2Tonda Core 2Tonda 2SetSail 2Struktur Core 1Dessau 1Mixtape 1Moments 1Tonda Membership 1Borgholm 1Manufaktur Solutions 1Hiroshi 1Micdrop 1Mildhill 1Santé 1Getaway 1Zermatt 1WaveRide 1

Exploited only (KEV) →

CVE-2026-22447 Medium · 5.3 CWE-862 Jan 22, 2026
WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerability
Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through <= 1.8.1.
CVE-2025-69029 Medium · 5.4 CWE-639 Dec 30, 2025
WordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through <= 2.5.1.
CVE-2025-68077 Medium · 6.5 CWE-79 Dec 16, 2025
WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This issue affects Stockholm: from n/a through <= 9.14.1.
CVE-2025-68076 Medium · 6.5 CWE-79 Dec 16, 2025
WordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core stockholm-core allows Stored XSS.This issue affects Stockholm Core: from n/a through <= 2.4.6.
CVE-2025-68068 High · 7.5 CWE-98 Dec 16, 2025
WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through <= 9.14.1.
CVE-2025-68067 High · 7.5 CWE-98 Dec 16, 2025
WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm Core stockholm-core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through <= 2.4.6.
CVE-2025-67539 Medium · 6.5 CWE-79 Dec 9, 2025
WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through < 2.6.
CVE-2025-67521 High · 7.5 CWE-98 Dec 9, 2025
WordPress Select Core plugin < 2.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Select Core select-core allows PHP Local File Inclusion.This issue affects Select Core: from n/a through < 2.6.
CVE-2025-39463 High · 7.5 CWE-98 Nov 6, 2025
WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9.