Vulnerabilidades de Elated-Themes
CVEs publicadas que afetam produtos de Elated-Themes: 55 registro(s), com severidade, exploração e correções.
Search & Go 3The Aisle 2Askka 2Laurent 2Sweet Jane 2Roisin 2Töbel 2NeoBeat 2Aperitif 2Måne 1Laurent Core 1Lella 1Gaspard 1The Aisle Core 1Gioia 1Verdure Core 1Ambient 1Léonie 1Search & Go - Directory WordPress Theme 1Frappé 1Savory 1Academist 1Neo Ocular 1Audrey 1Flow 1Vino 1Solene 1Helvig 1Zentrum 1Etchy 1FindAll 1Amoli 1Leroux 1FindAll Listing 1FindAll Membership 1Elated Membership 1Elated Listing 1Fidalgo 1Malmö 1Mr. SEO 1
CVE-2026-66566
Alta · 8.1
CWE-98 10/10/2026
WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.
CVE-2026-66671
Alta · 8.1
CWE-98 24/08/2026
WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVE-2026-66670
Alta · 8.1
CWE-98 24/08/2026
WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
CVE-2026-65481
Alta · 7.5
CWE-98 23/07/2026
WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability
Contributor Local File Inclusion in Vino <= 1.9 versions.
CVE-2026-57793
Alta · 7.5
CWE-98 13/07/2026
WordPress Flow theme <= 1.8 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion.This issue affects Flow: from n/a through <= 1.8.
CVE-2026-42382
Alta · 8.1
CWE-98 02/07/2026
WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.
CVE-2026-39576
Alta · 8.1
CWE-502 17/06/2026
WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions.
CVE-2026-39556
Alta · 8.1
CWE-502 17/06/2026
WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Konsept <= 1.9 versions.
CVE-2026-39523
Alta · 8.1
CWE-98 17/06/2026
WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions.
CVE-2026-40758
Alta · 8.1
CWE-502 17/06/2026
WordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.
CVE-2026-40754
Alta · 8.1
CWE-502 17/06/2026
WordPress Roisin theme <= 1.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.
CVE-2026-39578
Média · 5.5
CWE-502 17/06/2026
WordPress Valiance theme <= 1.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.
CVE-2026-39577
Média · 5.5
CWE-502 17/06/2026
WordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.
CVE-2026-39568
Alta · 8.1
CWE-98 17/06/2026
WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.
CVE-2026-39558
Alta · 8.1
CWE-98 17/06/2026
WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.
CVE-2026-39557
Alta · 8.1
CWE-502 17/06/2026
WordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.
CVE-2026-39554
Alta · 8.1
CWE-502 17/06/2026
WordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.
CVE-2026-39549
Alta · 8.1
CWE-98 17/06/2026
WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.
CVE-2026-39522
Alta · 8.1
CWE-98 17/06/2026
WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability
Unauthenticated Local File Inclusion in Solene <= 3.4 versions.
CVE-2026-39555
Alta · 8.1
CWE-502 02/06/2026
WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection.
This issue affects Askka: from n/a through 1.3.1.
CVE-2026-39551
Alta · 8.1
CWE-502 02/06/2026
WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection.
This issue affects Töbel: from n/a through 1.8.1.
CVE-2026-39550
Alta · 8.1
CWE-502 02/06/2026
WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection.
This issue affects Aperitif: from n/a through 1.6.
CVE-2026-32507
Média · 5.4
CWE-502 25/03/2026
WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability
Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4.
CVE-2026-27048
Alta · 8.1
CWE-98 25/03/2026
WordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The Aisle Core: from n/a through <= 2.0.5.
CVE-2026-24972
Média · 6.5
CWE-862 25/03/2026
WordPress Elated Listing plugin <= 1.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elated Listing: from n/a through <= 1.4.