Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Vendor: snstheme Clear all filters
TI-2026-22495 CVE-2026-28154 · GHSA-7j49-7w6m-5r8m

WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress T…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00261 Published 2026-08-13 No fix listed CWE-79
TI-2025-20890 CVE-2025-28947 · GHSA-hvw2-rjh2-4c5m

WordPress MBStore - Digital WooCommerce WordPress Theme <= 2.3 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme MBStore - Digital WooCommerce WordPress Theme mbstore allows PHP Local File Inclusion.This…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-20933 CVE-2025-28990 · GHSA-6cr4-3hv4-9r69

WordPress SNS Vicky theme <= 3.7 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme SNS Vicky snsvicky allows PHP Local File Inclusion.This issue affects SNS Vicky: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2023-11242 CVE-2023-25998 · GHSA-m439-966f-hw28

WordPress Samex - Clean, Minimal Shop WooCommerce WordPress Theme <= 2.6 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme allows PHP Local File Inclusion.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-18478 CVE-2025-24761 · GHSA-67p8-9gwr-hm74

WordPress DSK theme < 2.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme DSK dsk allows PHP Local File Inclusion.This issue affects DSK: from n/a through < 2.4.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-17 No fix listed CWE-98
TI-2025-20934 CVE-2025-28991 · GHSA-w9wg-637c-7r93

WordPress Evon theme <= 3.4 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Evon snsevon allows PHP Local File Inclusion.This issue affects Evon: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00719 Published 2025-06-17 No fix listed CWE-98
TI-2025-20945 CVE-2025-29002 · GHSA-vq69-pgh5-grcp

WordPress Simen theme <= 4.6 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Simen snssimen allows PHP Local File Inclusion.This issue affects Simen: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00719 Published 2025-06-17 No fix listed CWE-98
TI-2023-11243 CVE-2023-25999 · GHSA-2h9r-5xf2-97qv

WordPress BodyCenter - Gym, Fitness WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme BodyCenter - Gym, Fitness WooCommerce WordPress Theme allows PHP Local File Inclusion.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-06-09 No fix listed CWE-98
TI-2025-18485 CVE-2025-24768 · GHSA-3f38-wq7x-5cp3

WordPress Nitan theme <= 2.9 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Nitan snsnitan allows PHP Local File Inclusion.This issue affects Nitan: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-06-09 No fix listed CWE-98
TI-2025-20887 CVE-2025-28944 · GHSA-35r6-q59h-rp4f

WordPress Avaz theme <= 2.8 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Avaz snsavaz allows PHP Local File Inclusion.This issue affects Avaz: from n/a through <=…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-06-09 No fix listed CWE-98
TI-2025-20888 CVE-2025-28945 · GHSA-64qq-cvrh-w3cq

WordPress Valen - Sport, Fashion WooCommerce WordPress Theme <= 2.4 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion WooCommerce WordPress Theme valen allows PHP Local File Inclusion.T…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-06-09 No fix listed CWE-98
TI-2025-20935 CVE-2025-28992 · GHSA-37v9-r9mr-ghgx

WordPress SNS Anton theme <= 4.1 - Local File Inclusion Vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme SNS Anton snsanton allows PHP Local File Inclusion.This issue affects SNS Anton: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00795 Published 2025-06-09 No fix listed CWE-98