Read the docs

Mikado-Themes

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high68CVSS 7.0–8.9

Exploited now

Mikado-Themes records in CISA KEV

No Mikado-Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Qi Addons For Elementor 9 records LOW Qi Blocks 6 records MEDIUM Backpack Traveler 2 records LOW Qode Essential Addons 2 records MEDIUM Wilmer 2 records MEDIUM Bard 1 record LOW Bridge 1 record LOW Bridge Core 1 record LOW

Records

2 records in Backpack Traveler · all components

TI-2025-26232 CVE-2025-39490 · GHSA-vcf3-77pf-w4hq

WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-42485 CVE-2025-69030 · GHSA-m5q6-m3r3-f79r

WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 24

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Trave…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0022 Published 2025-12-30 No fix listed CWE-639
Open these records in search →