Vulnerabilidades de Axiomthemes
CVEs publicadas que afetam produtos de Axiomthemes: 94 registro(s), com severidade, exploração e correções.
Smartseo 3Kicker 2Soleil 1Prisma 1Tripster 1Ipharm 1Heartstar 1Lione 1Spock 1Aromatica 1Athos 1Vocal 1Ecogrow 1Manufactory 1Agricola 1Dwell 1Fabric 1Basil 1Tacticool 1Catamaran 1Lunna 1The Gig 1Anubis 1Spin 1Racquet 1White Rabbit 1Original 1Kids Care 1Veto 1Balance 1m2 | Construction and Tools Store 1FC United 1Amuli 1Reprizo 1Promo 1Panda 1Fermentio 1Crafti 1Confidant 1Photolia 1
CVE-2026-66569
Crítica · 9.8
CWE-502 10/10/2026
WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.
CVE-2026-66568
Crítica · 9.8
CWE-502 10/10/2026
WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.
CVE-2026-66565
Crítica · 9.8
CWE-502 10/10/2026
WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.
CVE-2026-42704
Alta · 8.1
CWE-98 10/10/2026
WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.
CVE-2026-93945
Crítica · 9.8
CWE-502 10/10/2026
WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.
CVE-2026-93927
Crítica · 9.8
CWE-502 10/10/2026
WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.
CVE-2026-22326
Alta · 8.1
CWE-98 17/06/2026
WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.
CVE-2026-22325
Alta · 8.1
CWE-98 17/06/2026
WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.
CVE-2025-69369
Alta · 8.1
CWE-98 02/06/2026
WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion.
This issue affects Racquet: from n/a through 1.12.0.
CVE-2025-58897
Alta · 8.1
CWE-98 02/06/2026
WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion.
This issue affects Fermentio: from n/a through 1.5.0.
CVE-2025-58707
Alta · 8.1
CWE-98 02/06/2026
WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion.
This issue affects Spin: from n/a through 1.8.
CVE-2025-58705
Alta · 8.1
CWE-98 02/06/2026
WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion.
This issue affects Crafti: from n/a through 1.12.
CVE-2025-53440
Alta · 8.1
CWE-98 02/06/2026
WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion.
This issue affects Confidant: from n/a through 1.4.
CVE-2026-22500
Crítica · 9.8
CWE-502 25/03/2026
WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and Tools Store: from n/a through <= 1.1.2.
CVE-2026-28129
Alta · 8.1
CWE-98 05/03/2026
WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.
CVE-2026-28119
Alta · 8.1
CWE-98 05/03/2026
WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.
CVE-2026-28118
Alta · 8.1
CWE-98 05/03/2026
WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4.
CVE-2026-28117
Alta · 8.1
CWE-98 05/03/2026
WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.
CVE-2026-28079
Alta · 8.1
CWE-98 05/03/2026
WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13.
CVE-2026-28024
Alta · 8.1
CWE-98 05/03/2026
WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through <= 1.1.12.
CVE-2026-27326
Alta · 8.1
CWE-98 05/03/2026
WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This issue affects AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme: from n/a through <= 1.2.5.
CVE-2026-27098
Alta · 8.1
CWE-502 05/03/2026
WordPress Au Pair Agency - Babysitting & Nanny Theme theme <= 1.2.2 - Deserialization of untrusted data vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - Babysitting & Nanny Theme: from n/a through <= 1.2.2.
CVE-2026-22501
Crítica · 9.8
CWE-502 05/03/2026
WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.
CVE-2026-22475
Crítica · 9.8
CWE-502 05/03/2026
WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.
CVE-2026-22370
Alta · 8.1
CWE-98 20/02/2026
WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0.