Read the docs

zozothemes

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

zozothemes records in CISA KEV

No zozothemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zegen 1 record LOW

Records

15 records

TI-2026-20145 CVE-2026-24960 · GHSA-vcx9-pvjh-vwcp

WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00384 Published 2026-03-05 No fix listed CWE-434
TI-2025-42442 CVE-2025-68986 · GHSA-2984-652w-j78c

WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through <= 1.2.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00515 Published 2026-01-22 No fix listed CWE-434
TI-2025-42076 CVE-2025-68555 · GHSA-m9vp-385j-cj3w

WordPress Nutrie theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-03-05 No fix listed CWE-434
TI-2025-42075 CVE-2025-68554 · GHSA-p2v8-jj8r-5pv4

WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-03-05 No fix listed CWE-434
TI-2025-42074 CVE-2025-68553 · GHSA-5w7m-j7v5-p6fq

WordPress Lendiz theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00519 Published 2026-03-05 No fix listed CWE-434
TI-2025-42070 CVE-2025-68549 · GHSA-9crc-72v8-4jmj

WordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-02-20 No fix listed CWE-434
TI-2025-41533 CVE-2025-67924 · GHSA-qh42-ch7g-8fpq

WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through <= 2.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00387 Published 2026-01-08 No fix listed CWE-434
TI-2025-42371 CVE-2025-68913 · GHSA-mx25-hc7r-rm8j

WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability

Priority MEDIUM 40

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00556 Published 2026-01-22 No fix listed CWE-98
TI-2025-02009 CVE-2025-2289 · GHSA-7xh9-5jqw-x95x

Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates

Priority LOW 38

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00285 Published 2025-03-14 No fix listed CWE-862
TI-2025-41534 CVE-2025-67925 · GHSA-wgp2-94gx-4mrv

WordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00527 Published 2026-01-08 No fix listed CWE-98
TI-2025-33219 CVE-2025-53252 · GHSA-57gx-p5pr-9553

WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00491 Published 2025-11-06 No fix listed CWE-98
Open these records in search →