Read the docs

axiomthemes

Records109All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high85CVSS 7.0–8.9

Exploited now

axiomthemes records in CISA KEV

No axiomthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartseo 2 records LOW 777 1 record LOW Agricola 1 record LOW Algenix 1 record LOW Alright 1 record LOW Anubis 1 record LOW Aromatica 1 record LOW Assembly 1 record LOW

Records

109 records

TI-2026-41562 CVE-2026-57738 · GHSA-vj9v-j9w9-c282

WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00564 Published 2026-07-13 No fix listed CWE-502
TI-2026-18082 CVE-2026-22501 · GHSA-2hg2-rq96-788r

WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00606 Published 2026-03-05 No fix listed CWE-502
TI-2025-37592 CVE-2025-60226 · GHSA-8x9p-2cgp-47v6

WordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability

Priority MEDIUM 50

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00581 Published 2025-10-22 No fix listed CWE-502
TI-2026-79744 CVE-2026-112858 · GHSA-c7g4-27cm-3cj8

PHP object injection in WordPress Rhodos theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-10-23 No fix listed CWE-502
TI-2026-79743 CVE-2026-112857 · GHSA-4jgx-23fw-g479

PHP object injection in WordPress Reprizo theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2026-10-23 No fix listed CWE-502
TI-2026-79741 CVE-2026-112855 · GHSA-rp4f-997r-jc7c

PHP object injection in WordPress Redy theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-10-23 No fix listed CWE-502
TI-2026-79739 CVE-2026-112853 · GHSA-w38j-prhv-7qfm

PHP object injection in WordPress Hallelujah theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00408 Published 2026-10-23 No fix listed CWE-502
TI-2026-70435 CVE-2026-66569 · GHSA-67gf-mq47-63m5

PHP object injection in WordPress Kicker theme

Priority MEDIUM 49

Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00304 Published 2026-10-10 No fix listed CWE-502
TI-2026-70434 CVE-2026-66568 · GHSA-7hr6-wjj3-8fvf

PHP object injection in WordPress Original theme

Priority MEDIUM 49

Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00322 Published 2026-10-10 No fix listed CWE-502
TI-2026-70431 CVE-2026-66565 · GHSA-gpxw-g22x-43pr

PHP object injection in WordPress FC United theme

Priority MEDIUM 49

Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00304 Published 2026-10-10 No fix listed CWE-502
TI-2026-70190 CVE-2026-93945 · GHSA-4236-v7g9-hpxg

PHP object injection in WordPress Balance theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00322 Published 2026-10-10 No fix listed CWE-502
TI-2026-70174 CVE-2026-93927 · GHSA-ph3c-8hm4-xwjm

PHP object injection in Axiomthemes Veto WordPress theme

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00328 Published 2026-10-10 No fix listed CWE-502
TI-2026-18056 CVE-2026-22475 · GHSA-vm67-7qc9-7rgr

WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00463 Published 2026-03-05 No fix listed CWE-502
TI-2025-31449 CVE-2025-49401 · GHSA-cgxm-32gj-cgq2

WordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability

Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in axiomthemes smart SEO smartSEO allows Privilege Escalation.This issue affects smart SEO: from n/a through <= 4.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2025-09-05 No fix listed CWE-266
TI-2025-31188 CVE-2025-49073 · GHSA-rpm2-9qcj-mmxg

WordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00499 Published 2025-06-06 No fix listed CWE-502
TI-2026-17947 CVE-2026-22365 · GHSA-v76h-ch32-xfcr

WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.This issue affects Soleng: from n/a throu…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-02-20 No fix listed CWE-98
TI-2025-31916 CVE-2025-50003 · GHSA-qxwh-xxrp-7mqj

WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00605 Published 2026-01-22 No fix listed CWE-98
TI-2026-79740 CVE-2026-112854 · GHSA-m93c-ph3f-wmg5

Object injection in WordPress Holistic Center theme

Priority MEDIUM 43

Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00313 Published 2026-10-23 No fix listed CWE-502
TI-2025-36579 CVE-2025-58935 · GHSA-5jh2-79v8-cgvf

WordPress Lunna theme <= 1.15 - Local File Inclusion vulnerability

Priority MEDIUM 43

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lunna lunna allows PHP Local File Inclusion.This issue affects Lunna: from n/a through…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00482 Published 2025-12-18 No fix listed CWE-98
TI-2025-31482 CVE-2025-49434 · GHSA-8q27-q3cx-xv8m

WordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability

Priority MEDIUM 43

Deserialization of Untrusted Data vulnerability in axiomthemes Cars4Rent cars4rent allows Object Injection.This issue affects Cars4Rent: from n/a through <= 1.4.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00503 Published 2025-08-20 No fix listed CWE-502
Load more
Open these records in search →