Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

14 records

Vendor: fuelthemes Clear all filters
TI-2026-70016 CVE-2026-94067 · GHSA-2xxc-vw34-6v9p

WordPress The Voux theme Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00327 Published 2026-10-09 No fix listed CWE-98
TI-2026-70011 CVE-2026-94062 · GHSA-7frf-w8g2-57vx

Local file inclusion in WordPress Werkstatt theme

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00334 Published 2026-10-09 No fix listed CWE-98
TI-2026-19167 CVE-2026-23801 · GHSA-62jp-f7v7-4hvp

WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusion.This issue affects The Issue: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-03-05 No fix listed CWE-98
TI-2025-42765 CVE-2025-69322 · GHSA-48pc-4fq3-jhwg

WordPress PeakShops theme < 1.5.9 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes PeakShops peakshops allows PHP Local File Inclusion.This issue affects PeakShops: from n…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2025-42737 CVE-2025-69294 · GHSA-5w67-c6pv-hmpq

WordPress PeakShops theme <= 1.5.9 - PHP Object Injection vulnerability

Priority MEDIUM 41

Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00556 Published 2026-02-20 No fix listed CWE-502
TI-2025-42757 CVE-2025-69314 · GHSA-v79x-27fq-r59f

WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-22 No fix listed CWE-98
TI-2025-42554 CVE-2025-69100 · GHSA-85pw-8hc6-85ff

WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP Local File Inclusion.This issue affects North: from n/a throug…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00616 Published 2026-01-22 No fix listed CWE-98
TI-2025-42553 CVE-2025-69099 · GHSA-gp33-fh24-7q8q

WordPress North theme <= 5.7.5 - PHP Object Injection vulnerability

Priority MEDIUM 41

Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00483 Published 2026-01-22 No fix listed CWE-502
TI-2025-39165 CVE-2025-63017 · GHSA-8qwx-32rr-mphx

WordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin werkstatt-plugin allows PHP Local File Inclusion.This issue affects Wer…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00578 Published 2026-01-22 No fix listed CWE-98
TI-2025-39151 CVE-2025-63003 · GHSA-xx8r-j779-rrrw

WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability

Priority LOW 33

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North - Required Plugin north-plugin allows PHP Local File Inclusion.This issue affects…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00458 Published 2025-12-09 No fix listed CWE-98
TI-2025-38389 CVE-2025-62066 · GHSA-cf83-9m7h-2m52

WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00394 Published 2025-11-06 No fix listed CWE-98