Read the docs

VanKarWai

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

VanKarWai records in CISA KEV

No VanKarWai vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-41530 CVE-2025-67921 · GHSA-q723-5hqf-qmpp

WordPress Lobo theme < 2.8.6 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VanKarWai Lobo lobo allows Blind SQL Injection.This issue affects Lobo: from n/a through < 2.8.6.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.003 Published 2026-01-08 No fix listed CWE-89
TI-2026-21761 CVE-2026-27343 · GHSA-q8m6-hjhf-m246

WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00487 Published 2026-02-19 No fix listed CWE-98
TI-2025-42785 CVE-2025-69342 · GHSA-635m-xjgg-38mc

WordPress Calafate theme <= 1.7.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Calafate calafate allows PHP Local File Inclusion.This issue affects Calafate: from n/a t…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0039 Published 2026-01-06 No fix listed CWE-98
TI-2025-40948 CVE-2025-66527 · GHSA-5925-5v57-58hq

WordPress Lobo theme <= 2.8.6 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in VanKarWai Lobo lobo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lobo: from n/a through <= 2.8.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-12-09 No fix listed CWE-862
Open these records in search →