Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: don-themes Clear all filters
TI-2026-17967 CVE-2026-22385 · GHSA-523v-hcg3-h5jf

WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local File Inclusion.This issue affects Wolmart: from n/a thr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00609 Published 2026-03-05 No fix listed CWE-98
TI-2025-42782 CVE-2025-69339 · GHSA-35j4-fgvf-285h

WordPress Molla theme <= 1.5.16 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Molla molla allows PHP Local File Inclusion.This issue affects Molla: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-03-05 No fix listed CWE-98
TI-2025-42781 CVE-2025-69338 · GHSA-6pjq-fx4j-hvg7

WordPress Riode Core plugin <= 1.6.26 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This issue affects Riode Core: from n/a through <= 1.6.26.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00445 Published 2026-03-05 No fix listed CWE-89
TI-2025-42780 CVE-2025-69337 · GHSA-q577-6r28-hw22

WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Wolmart Core wolmart-core allows Blind SQL Injection.This issue affects Wolmart Core: from n/a through <= 1…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-37437 CVE-2025-60071 · GHSA-cmmr-h938-6rwx

WordPress Riode | Multi-Purpose WooCommerce theme <= 1.6.23 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Riode riode allows PHP Local File Inclusion.This issue affects Riode: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00499 Published 2025-12-18 No fix listed CWE-98