Read the docs

goalthemes

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

goalthemes records in CISA KEV

No goalthemes vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2025-42499 CVE-2025-69044 · GHSA-pxhj-59jv-75r7

WordPress Vango theme <= 1.3.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Vango vango allows PHP Local File Inclusion.This issue affects Vango: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42498 CVE-2025-69043 · GHSA-ww54-q5mm-h44g

WordPress Rashy theme <= 1.1.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Rashy rashy allows PHP Local File Inclusion.This issue affects Rashy: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42497 CVE-2025-69042 · GHSA-2p99-vc9j-4p2g

WordPress Lindo theme <= 1.2.5 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Lindo lindo allows PHP Local File Inclusion.This issue affects Lindo: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42496 CVE-2025-69041 · GHSA-jm69-rg69-2cwx

WordPress Dekoro theme <= 1.0.7 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Dekoro dekoro allows PHP Local File Inclusion.This issue affects Dekoro: from n/a throug…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00574 Published 2026-01-22 No fix listed CWE-98
TI-2025-42495 CVE-2025-69040 · GHSA-9wq4-qhqp-553r

WordPress Bfres theme <= 1.2.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bfres bfres allows PHP Local File Inclusion.This issue affects Bfres: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42494 CVE-2025-69039 · GHSA-mx2c-wc24-4pmp

WordPress Bailly theme <= 1.3.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Bailly bailly allows PHP Local File Inclusion.This issue affects Bailly: from n/a throug…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00574 Published 2026-01-22 No fix listed CWE-98
TI-2025-42493 CVE-2025-69038 · GHSA-j2jw-74w2-j7r9

WordPress Hyori theme <= 1.3.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Hyori hyori allows PHP Local File Inclusion.This issue affects Hyori: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42492 CVE-2025-69037 · GHSA-8pwv-j76x-qwv3

WordPress Pippo theme <= 1.2.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Pippo pippo allows PHP Local File Inclusion.This issue affects Pippo: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-18477 CVE-2025-24760 · GHSA-h6pf-98c4-4pgf

WordPress Sofass theme <= 1.3.4 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in goalthemes Sofass sofass allows PHP Local File Inclusion.This issue affects Sofass: from n/a throug…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
Open these records in search →