Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

37 records

Vendor: thembay Clear all filters
TI-2026-21797 CVE-2026-27381 · GHSA-5c2f-mjvx-w9j2

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-98
TI-2025-42066 CVE-2025-68545 · GHSA-4qvw-ghv2-2gg4

WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00592 Published 2026-02-20 No fix listed CWE-98
TI-2025-42064 CVE-2025-68543 · GHSA-q6xg-x4rx-4p97

WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00639 Published 2026-02-20 No fix listed CWE-98
TI-2025-42060 CVE-2025-68539 · GHSA-wfqx-gw86-rc8h

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2025-42057 CVE-2025-68536 · GHSA-4ff7-6hm2-x86r

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00583 Published 2026-02-20 No fix listed CWE-98
TI-2025-41591 CVE-2025-67982 · GHSA-mwrf-hg69-6h5g

WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00685 Published 2026-02-20 No fix listed CWE-98
TI-2025-41590 CVE-2025-67981 · GHSA-733c-qhrf-7cmm

WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00685 Published 2026-02-20 No fix listed CWE-98
TI-2025-41589 CVE-2025-67980 · GHSA-58h5-w6gx-q297

WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00625 Published 2026-02-20 No fix listed CWE-98
TI-2025-42441 CVE-2025-68985 · GHSA-p53h-3f9r-wqfh

WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00462 Published 2025-12-30 No fix listed CWE-98
TI-2025-42440 CVE-2025-68984 · GHSA-6xw6-m3mp-wcgg

WordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-30 No fix listed CWE-98
TI-2025-42439 CVE-2025-68983 · GHSA-qfmr-crpq-mvc3

WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-30 No fix listed CWE-98
TI-2025-42061 CVE-2025-68540 · GHSA-qhrp-fccp-2wcx

WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00387 Published 2025-12-24 No fix listed CWE-98
TI-2025-42058 CVE-2025-68537 · GHSA-2xwp-gm9f-mwxv

WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00387 Published 2025-12-24 No fix listed CWE-98
TI-2025-42067 CVE-2025-68546 · GHSA-7m28-5wmq-35c3

WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00361 Published 2025-12-23 No fix listed CWE-98
TI-2025-42065 CVE-2025-68544 · GHSA-jc37-gw8j-228g

WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.0039 Published 2025-12-23 No fix listed CWE-98
TI-2025-41286 CVE-2025-67532 · GHSA-2q9h-6v2j-hfpp

WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-09 No fix listed CWE-98
TI-2025-41284 CVE-2025-67530 · GHSA-6pvg-49r3-g3c7

WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-09 No fix listed CWE-98
TI-2025-41282 CVE-2025-67528 · GHSA-vrh5-pxv9-qjvv

WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00445 Published 2025-12-09 No fix listed CWE-98
TI-2025-30541 CVE-2025-48171 · GHSA-p6v4-696m-j779

WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allows PHP Local File Inclusion.This issue affects Cena Store: from n/a thr…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00496 Published 2025-08-20 No fix listed CWE-98
TI-2025-34452 CVE-2025-54689 · GHSA-j699-7h2j-j25r

WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00575 Published 2025-08-14 No fix listed CWE-98
TI-2025-22262 CVE-2025-30992 · GHSA-v5c7-fqqq-hh94

WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-31798 CVE-2025-49883 · GHSA-p87f-2cgj-9wvv

WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00718 Published 2025-06-27 No fix listed CWE-98
TI-2025-32779 CVE-2025-52729 · GHSA-v52m-gpv6-wmhc

WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00582 Published 2025-06-27 No fix listed CWE-98
Load more