Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: gavias Clear all filters
TI-2026-25059 CVE-2026-32531 · GHSA-mhr3-454m-4wv6

WordPress Kunco theme < 1.4.5 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kunco kunco allows PHP Local File Inclusion.This issue affects Kunco: from n/a through < 1.4…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0034 Published 2026-03-25 No fix listed CWE-98
TI-2025-36020 CVE-2025-58215 · GHSA-444p-87wx-v9fp

WordPress Ziston Theme < 1.4.5 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Ziston ziston allows PHP Local File Inclusion.This issue affects Ziston: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00527 Published 2025-09-09 No fix listed CWE-98
TI-2025-36019 CVE-2025-58214 · GHSA-2c3p-p4pf-5q6h

WordPress Indutri Theme < 1.3.0 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.This issue affects Indutri: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0059 Published 2025-09-05 No fix listed CWE-98
TI-2025-33515 CVE-2025-53578 · GHSA-7p5h-wc3v-7h5w

WordPress Kipso Theme <= 1.3.4 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kipso kipso allows PHP Local File Inclusion.This issue affects Kipso: from n/a through <= 1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00542 Published 2025-08-28 No fix listed CWE-98
TI-2024-28986 CVE-2024-43334 · GHSA-x7g8-r4f8-wp3m

WordPress Zilom theme < 1.4.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gavias Zilom zilom allows Reflected XSS.This issue affects Zilom: from n/a through < 1.4.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00214 Published 2025-07-07 No fix listed CWE-79
TI-2025-23660 CVE-2025-32595 · GHSA-3jmp-fmj9-58pw

WordPress Krowd theme < 1.5.0 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Krowd krowd allows PHP Local File Inclusion.This issue affects Krowd: from n/a through < 1.5…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-06-09 No fix listed CWE-98
TI-2025-22334 CVE-2025-31064 · GHSA-v7m3-xg38-3qfq

WordPress Vizeon theme < 1.2.1 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Vizeon - Business Consulting vizeon allows PHP Local File Inclusion.This issue affects Vizeo…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-22796 CVE-2025-31633 · GHSA-3268-x73x-v8rp

WordPress Kiamo - Responsive Business Service WordPress Theme <= 1.3.3 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Kiamo - Responsive Business Service WordPress Theme allows PHP Local File Inclusion.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-23049 CVE-2025-31912 · GHSA-87qj-crf6-m933

WordPress Enzio - Responsive Business WordPress Theme theme < 1.2.6 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Enzio - Responsive Business WordPress Theme enzio allows PHP Local File Inclusion.This issue…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-23391 CVE-2025-32294 · GHSA-6599-4gf3-q8fm

WordPress Oxpitan theme <= 1.3.5 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Oxpitan oxpitan allows PHP Local File Inclusion.This issue affects Oxpitan: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-23399 CVE-2025-32302 · GHSA-wfv4-fr2r-9jgv

WordPress Winnex theme <= 1.3.2 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Winnex winnex allows PHP Local File Inclusion.This issue affects Winnex: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98