TI-2026-56405 CVE-2026-81769 · GHSA-9983-3rrh-45m6
WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability
Priority MEDIUM 40
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation.
Vulnerabilities
11 records
TI-2026-25088 CVE-2026-32561 · GHSA-885h-242g-m4q2
WordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions.
TI-2026-25087 CVE-2026-32560 · GHSA-93q2-r22v-rmph
WordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin…
Priority MEDIUM 40
Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions.
TI-2026-46750 CVE-2026-65582 · GHSA-h7c8-vx4q-xf5p
WordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerability
Priority LOW 34
Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.
TI-2026-20572 CVE-2026-25460 · GHSA-5r5h-9j2h-8qf8
WordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerability
Priority LOW 27
Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ave Core: from n/a through <= 2.9.1.
TI-2025-41674 CVE-2025-68065 · GHSA-3wxp-8m6g-m8x5
WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability
Priority LOW 35
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LiquidThemes Hub Core allows PHP Local File Inclusion.
TI-2025-12232 CVE-2025-13380 · GHSA-r2f4-vxwc-229j
AI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File Read
Priority LOW 29
The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.
TI-2025-00806 CVE-2025-0951 · GHSA-wqc4-cwr9-mww9
LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated
Priority LOW 19
Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions.
TI-2025-22203 CVE-2025-30933 · GHSA-87qr-9c54-hj3q
WordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability
Priority MEDIUM 49
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes LogisticsHub logistics-hub allows Upload a Web Shell to a Web Server.This issue affects LogisticsHub: from n/a through <= 1.1.6.
TI-2025-00928 CVE-2025-1093 · GHSA-p9f4-fp6p-vqgh
AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image
Priority MEDIUM 51
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7.
TI-2025-19798 CVE-2025-26927 · GHSA-rcrq-pv9x-j35x
WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability
Priority MEDIUM 49
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through <= 1.3.7.