Read the docs

CreativeWS

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

CreativeWS records in CISA KEV

No CreativeWS vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2026-25033 CVE-2026-32505 · GHSA-h6jq-2xmv-3pm5

WordPress Kiddy theme <= 2.0.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Kiddy kiddy allows PHP Local File Inclusion.This issue affects Kiddy: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-25032 CVE-2026-32504 · GHSA-3jh5-j4j5-8xqx

WordPress VintWood theme <= 1.1.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS VintWood vintwood allows PHP Local File Inclusion.This issue affects VintWood: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-25031 CVE-2026-32503 · GHSA-5m8c-vmvv-94fg

WordPress Trendustry theme <= 1.1.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Trendustry trendustry allows PHP Local File Inclusion.This issue affects Trendustry: fro…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00532 Published 2026-03-25 No fix listed CWE-98
TI-2026-25028 CVE-2026-32500 · GHSA-xwq3-q3mj-2j47

WordPress MetaMax theme <= 1.1.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS MetaMax metamax allows PHP Local File Inclusion.This issue affects MetaMax: from n/a thr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-41609 CVE-2026-57787 · GHSA-jfw2-gf24-5x99

WordPress CWS SVGicons plugin <= 1.5.5 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue affects CWS SVGicons: from n/a through <= 1…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-13 No fix listed CWE-89
Open these records in search →