Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: CreativeWS Clear all filters
TI-2026-41609 CVE-2026-57787 · GHSA-jfw2-gf24-5x99

WordPress CWS SVGicons plugin <= 1.5.5 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeWS CWS SVGicons cws-svgicons allows Blind SQL Injection.This issue affects CWS SVGicons: from n/a through <= 1…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-13 No fix listed CWE-89
TI-2026-25033 CVE-2026-32505 · GHSA-h6jq-2xmv-3pm5

WordPress Kiddy theme <= 2.0.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Kiddy kiddy allows PHP Local File Inclusion.This issue affects Kiddy: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-25032 CVE-2026-32504 · GHSA-3jh5-j4j5-8xqx

WordPress VintWood theme <= 1.1.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS VintWood vintwood allows PHP Local File Inclusion.This issue affects VintWood: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-25031 CVE-2026-32503 · GHSA-5m8c-vmvv-94fg

WordPress Trendustry theme <= 1.1.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS Trendustry trendustry allows PHP Local File Inclusion.This issue affects Trendustry: fro…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00532 Published 2026-03-25 No fix listed CWE-98
TI-2026-25028 CVE-2026-32500 · GHSA-xwq3-q3mj-2j47

WordPress MetaMax theme <= 1.1.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CreativeWS MetaMax metamax allows PHP Local File Inclusion.This issue affects MetaMax: from n/a thr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98