Priority MEDIUM 50
The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00555 · Published 2025-10-09 · No fix listed CWE-288
Priority MEDIUM 50
The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00566 · Published 2025-03-01 · No fix listed CWE-288
Priority MEDIUM 49
Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00334 · Published 2026-03-25 · No fix listed CWE-266
Priority MEDIUM 49
The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00477 · Published 2025-12-10 · No fix listed CWE-289
Priority MEDIUM 49
The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00488 · Published 2025-11-27 · No fix listed CWE-288
Priority MEDIUM 49
The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00374 · Published 2025-11-27 · No fix listed CWE-269
Priority MEDIUM 42
Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through <= 2.7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00422 · Published 2025-11-06 · No fix listed CWE-288
Priority LOW 39
The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00792 · Published 2026-08-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Acad…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00438 · Published 2026-10-22 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-24 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Måne <= 1.7 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-08-24 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00467 · Published 2026-07-02 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Mr.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-06-16 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-06-16 · No fix listed CWE-98
Priority LOW 38
Unauthenticated Local File Inclusion in Solene <= 3.4 versions.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00423 · Published 2026-06-16 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The A…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP Local File Inclusion.This issue affects Roisin: from n/a thr…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows PHP Local File Inclusion.This issue affects NeoBeat: from n/a…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP Local File Inclusion.This issue affects Gioia: from n/a throug…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a throug…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.This issue affects Lella: from n/a throug…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusion.This issue affects Gaspard: from n/a…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00524 · Published 2026-03-25 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows PHP Local File Inclusion.This issue affects FindAll: from n/a…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00592 · Published 2026-03-05 · No fix listed CWE-98
Priority LOW 38
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.This issue affects Etchy: from n/a throug…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00473 · Published 2026-03-05 · No fix listed CWE-98
Load more