Read the docs

Select-Themes

Records39All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

Select-Themes records in CISA KEV

No Select-Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stockholm 2 records MEDIUM Stockholm Core 2 records MEDIUM

Records

39 records

TI-2026-25030 CVE-2026-32502 · GHSA-4hr4-h2px-hp7g

WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm: from n/a through < 1.6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00389 Published 2026-03-25 No fix listed CWE-502
TI-2024-22856 CVE-2024-34554 · GHSA-v66w-6xcw-823f

WordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through 2.4.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00514 Published 2024-06-04 No fix listed CWE-22
TI-2024-22854 CVE-2024-34552 · GHSA-fwx9-39m5-rw4v

WordPress Stockholm theme <= 9.6 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00514 Published 2024-06-04 No fix listed CWE-22
TI-2026-20570 CVE-2026-25458 · GHSA-66m2-467q-7g98

WordPress Moments theme <= 2.2 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Moments moments allows PHP Local File Inclusion.This issue affects Moments: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20569 CVE-2026-25457 · GHSA-28r9-jxmr-8hgr

WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Mixtape mixtape allows PHP Local File Inclusion.This issue affects Mixtape: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-18030 CVE-2026-22449 · GHSA-4574-w5wx-78f9

WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allows PHP Local File Inclusion.This issue affects Don Peppe: from…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-03-05 No fix listed CWE-98
TI-2026-18027 CVE-2026-22446 · GHSA-5p46-9qqx-mmp9

WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-03-05 No fix listed CWE-98
TI-2026-18004 CVE-2026-22423 · GHSA-hrp7-mvmf-8mpv

WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-03-05 No fix listed CWE-98
TI-2025-42850 CVE-2025-69407 · GHSA-3rcg-gg9q-9688

WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File Inclusion.This issue affects Struktur: from n…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2026-28527 CVE-2026-39553 · GHSA-hfjv-pq6h-6ffm

WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00334 Published 2026-06-02 No fix listed CWE-98
TI-2026-19772 CVE-2026-24531 · GHSA-7rrw-hv84-79w3

WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00547 Published 2026-01-23 No fix listed CWE-98
TI-2025-26205 CVE-2025-39463 · GHSA-89gq-fcxr-3chg

WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00614 Published 2025-11-06 No fix listed CWE-98
Load more
Open these records in search →