Read the docs

thembay

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high36CVSS 7.0–8.9

Exploited now

thembay records in CISA KEV

No thembay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Greenmart 1 record LOW

Records

37 records

TI-2026-21797 CVE-2026-27381 · GHSA-5c2f-mjvx-w9j2

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-98
TI-2025-42066 CVE-2025-68545 · GHSA-4qvw-ghv2-2gg4

WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-02-20 No fix listed CWE-98
TI-2025-42064 CVE-2025-68543 · GHSA-q6xg-x4rx-4p97

WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00639 Published 2026-02-20 No fix listed CWE-98
TI-2025-42060 CVE-2025-68539 · GHSA-wfqx-gw86-rc8h

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2025-42057 CVE-2025-68536 · GHSA-4ff7-6hm2-x86r

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2025-41591 CVE-2025-67982 · GHSA-mwrf-hg69-6h5g

WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00685 Published 2026-02-20 No fix listed CWE-98
TI-2025-41590 CVE-2025-67981 · GHSA-733c-qhrf-7cmm

WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00685 Published 2026-02-20 No fix listed CWE-98
TI-2025-41589 CVE-2025-67980 · GHSA-58h5-w6gx-q297

WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00625 Published 2026-02-20 No fix listed CWE-98
TI-2025-34452 CVE-2025-54689 · GHSA-j699-7h2j-j25r

WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00575 Published 2025-08-14 No fix listed CWE-98
TI-2025-32779 CVE-2025-52729 · GHSA-v52m-gpv6-wmhc

WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-27 No fix listed CWE-98
TI-2025-31798 CVE-2025-49883 · GHSA-p87f-2cgj-9wvv

WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-31309 CVE-2025-49261 · GHSA-4pw8-32jj-qvhg

WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00728 Published 2025-06-17 No fix listed CWE-98
TI-2025-31308 CVE-2025-49260 · GHSA-q5q2-f2w6-4hv2

WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00728 Published 2025-06-17 No fix listed CWE-98
TI-2025-31307 CVE-2025-49259 · GHSA-7gfp-vw4p-pwq6

WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31306 CVE-2025-49258 · GHSA-jxw9-h52c-38gc

WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through <= 1.1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00728 Published 2025-06-17 No fix listed CWE-98
TI-2025-31305 CVE-2025-49257 · GHSA-3qxh-754r-9gj8

WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31304 CVE-2025-49256 · GHSA-57cv-cw2w-6p65

WordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through <= 1.1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31303 CVE-2025-49255 · GHSA-97w4-jxqq-ff6r

WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through <= 1.0.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31302 CVE-2025-49254 · GHSA-mgq8-c9m8-p3vr

WordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31301 CVE-2025-49253 · GHSA-6gch-px86-w664

WordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Lasa lasa allows PHP Local File Inclusion.This issue affects Lasa: from n/a through <= 1.1.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31300 CVE-2025-49252 · GHSA-c6wg-764q-wqwh

WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-31299 CVE-2025-49251 · GHSA-9x7j-p843-jwxg

WordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-17 No fix listed CWE-98
TI-2025-30541 CVE-2025-48171 · GHSA-p6v4-696m-j779

WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allows PHP Local File Inclusion.This issue affects Cena Store: from n/a thr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00496 Published 2025-08-20 No fix listed CWE-98
TI-2025-22262 CVE-2025-30992 · GHSA-v5c7-fqqq-hh94

WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-42441 CVE-2025-68985 · GHSA-p53h-3f9r-wqfh

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00462 Published 2025-12-30 No fix listed CWE-98
Load more
Open these records in search →