Vulnerabilidades de Edge-Themes

CVEs publicadas que afetam produtos de Edge-Themes: 18 registro(s), com severidade, exploração e correções.

Alloggio - Hotel Booking 2 Eldon 2 Belletrist 1 Aalto 1 Gracey 1 Reina 1 Laurits 1 Behold 1 Valeska 1 Overworld 1 Haaken 1 Cinerama 1 Edge CPT 1 Pelicula 1 Archicon 1 Kamperen 1

Somente exploradas (KEV) →

CVE-2026-42777 Alta · 8.1 CWE-98 10/10/2026

WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

CVE-2026-104747 Alta · 8.1 CWE-502 06/10/2026

WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

CVE-2026-40738 Alta · 8.1 CWE-502 17/06/2026

WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.

CVE-2026-40761 Alta · 8.1 CWE-502 17/06/2026

WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.

CVE-2026-40760 Alta · 8.1 CWE-502 17/06/2026

WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Behold <= 1.5 versions.

CVE-2026-40736 Alta · 8.1 CWE-502 17/06/2026

WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

CVE-2026-40735 Alta · 8.1 CWE-502 17/06/2026

WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

CVE-2026-39539 Alta · 8.1 CWE-502 17/06/2026

WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

CVE-2026-32512 Crítica · 9.8 CWE-502 25/03/2026

Tema WordPress Pelicula (Edge-Themes): Injeção de Objeto PHP

Vulnerabilidade de Desserialização de Dados Não Confiáveis no Edge-Themes Pelicula pelicula-video-production-and-movie-theme permite Injeção de Objeto.Esse problema afeta o Pelicula: da n/a até < 1.10.

CVE-2026-32510 Média · 5.4 CWE-502 25/03/2026

WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability

Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3.

CVE-2026-32509 Média · 5.4 CWE-502 25/03/2026

WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability

Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4.

CVE-2026-32506 Média · 5.4 CWE-502 25/03/2026

WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability

Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7.

CVE-2025-69410 Alta · 8.1 CWE-98 20/02/2026

WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2.

CVE-2025-69057 Alta · 8.1 CWE-98 22/01/2026

WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through <= 1.0.

CVE-2025-69050 Alta · 8.1 CWE-98 22/01/2026

WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.3.

CVE-2025-68987 Alta · 7.5 CWE-98 30/12/2025

WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows PHP Local File Inclusion.This issue affects Cinerama: from n/a through <= 2.9.

CVE-2025-64287 Alta · 8.1 CWE-98 06/11/2025

WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a through <= 1.8.

CVE-2025-62868 Alta · 8.1 CWE-98 24/10/2025

WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4.