Read the docs

jwsthemes

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

jwsthemes records in CISA KEV

No jwsthemes vulnerabilities are listed in CISA KEV.

Records

9 records

TI-2026-20500 CVE-2026-25382 · GHSA-66q5-m54j-76xc

WordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes IdealAuto idealauto allows PHP Local File Inclusion.This issue affects IdealAuto: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20499 CVE-2026-25381 · GHSA-78gv-qcgr-j4jp

WordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes LoveDate lovedate allows PHP Local File Inclusion.This issue affects LoveDate: from n/a t…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20498 CVE-2026-25380 · GHSA-f22x-p3pj-97vr

WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Feedy feedy allows PHP Local File Inclusion.This issue affects Feedy: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20497 CVE-2026-25379 · GHSA-7gf4-9xwp-h6w5

WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2025-11513 CVE-2025-12550 · GHSA-5q4f-4924-xr8v

WordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes OchaHouse ochahouse allows PHP Local File Inclusion.This issue affects OchaHouse: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00574 Published 2026-01-08 No fix listed CWE-98
TI-2025-42541 CVE-2025-69087 · GHSA-gvq9-x998-gj3m

WordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes FreeAgent freeagent allows PHP Local File Inclusion.This issue affects FreeAgent: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00393 Published 2026-01-05 No fix listed CWE-98
TI-2025-42540 CVE-2025-69086 · GHSA-gwgr-2crh-gp64

WordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Issabella issabella allows PHP Local File Inclusion.This issue affects Issabella: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00393 Published 2026-01-06 No fix listed CWE-98
TI-2026-41611 CVE-2026-57789 · GHSA-3f56-258r-mg3f

WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through <= 5.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00511 Published 2026-07-13 No fix listed CWE-98
Open these records in search →