Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: jwsthemes Clear all filters
TI-2026-41611 CVE-2026-57789 · GHSA-3f56-258r-mg3f

WordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Aqua aqua allows PHP Local File Inclusion.This issue affects Aqua: from n/a through <= 5.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00511 Published 2026-07-13 No fix listed CWE-98
TI-2026-20500 CVE-2026-25382 · GHSA-66q5-m54j-76xc

WordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes IdealAuto idealauto allows PHP Local File Inclusion.This issue affects IdealAuto: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20499 CVE-2026-25381 · GHSA-78gv-qcgr-j4jp

WordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes LoveDate lovedate allows PHP Local File Inclusion.This issue affects LoveDate: from n/a t…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20498 CVE-2026-25380 · GHSA-f22x-p3pj-97vr

WordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Feedy feedy allows PHP Local File Inclusion.This issue affects Feedy: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2026-20497 CVE-2026-25379 · GHSA-7gf4-9xwp-h6w5

WordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes StreamVid streamvid allows PHP Local File Inclusion.This issue affects StreamVid: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2025-11513 CVE-2025-12550 · GHSA-5q4f-4924-xr8v

WordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes OchaHouse ochahouse allows PHP Local File Inclusion.This issue affects OchaHouse: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00574 Published 2026-01-08 No fix listed CWE-98
TI-2025-42540 CVE-2025-69086 · GHSA-gwgr-2crh-gp64

WordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes Issabella issabella allows PHP Local File Inclusion.This issue affects Issabella: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00393 Published 2026-01-06 No fix listed CWE-98
TI-2025-42541 CVE-2025-69087 · GHSA-gvq9-x998-gj3m

WordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in jwsthemes FreeAgent freeagent allows PHP Local File Inclusion.This issue affects FreeAgent: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00393 Published 2026-01-05 No fix listed CWE-98