Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: pavothemes Clear all filters
TI-2026-17983 CVE-2026-22402 · GHSA-37wf-9xh5-hqxc

WordPress Triply theme <= 2.4.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pavothemes Triply triply allows PHP Local File Inclusion.This issue affects Triply: from n/a throug…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-01-22 No fix listed CWE-98
TI-2026-17982 CVE-2026-22401 · GHSA-6h2f-26q7-fj62

WordPress Freshio theme <= 2.4.2 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pavothemes Freshio freshio allows PHP Local File Inclusion.This issue affects Freshio: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2026-01-22 No fix listed CWE-98
TI-2025-42051 CVE-2025-68530 · GHSA-99q6-rwrv-jmv2

WordPress Bookory theme <= 2.2.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in pavothemes Bookory bookory allows PHP Local File Inclusion.This issue affects Bookory: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00361 Published 2025-12-24 No fix listed CWE-98