Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: zozothemes Clear all filters
TI-2026-20145 CVE-2026-24960 · GHSA-vcx9-pvjh-vwcp

WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00384 Published 2026-03-05 No fix listed CWE-434
TI-2025-42076 CVE-2025-68555 · GHSA-m9vp-385j-cj3w

WordPress Nutrie theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-03-05 No fix listed CWE-434
TI-2025-42075 CVE-2025-68554 · GHSA-p2v8-jj8r-5pv4

WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-03-05 No fix listed CWE-434
TI-2025-42074 CVE-2025-68553 · GHSA-5w7m-j7v5-p6fq

WordPress Lendiz theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00519 Published 2026-03-05 No fix listed CWE-434
TI-2025-42070 CVE-2025-68549 · GHSA-9crc-72v8-4jmj

WordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00504 Published 2026-02-20 No fix listed CWE-434
TI-2025-42442 CVE-2025-68986 · GHSA-2984-652w-j78c

WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through <= 1.2.7.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00515 Published 2026-01-22 No fix listed CWE-434
TI-2025-42371 CVE-2025-68913 · GHSA-mx25-hc7r-rm8j

WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability

Priority MEDIUM 40

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00556 Published 2026-01-22 No fix listed CWE-98
TI-2025-41534 CVE-2025-67925 · GHSA-wgp2-94gx-4mrv

WordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00527 Published 2026-01-08 No fix listed CWE-98
TI-2025-41533 CVE-2025-67924 · GHSA-qh42-ch7g-8fpq

WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through <= 2.0.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00387 Published 2026-01-08 No fix listed CWE-434
TI-2025-33219 CVE-2025-53252 · GHSA-57gx-p5pr-9553

WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00491 Published 2025-11-06 No fix listed CWE-98
TI-2025-02009 CVE-2025-2289 · GHSA-7xh9-5jqw-x95x

Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates

Priority LOW 38

The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00285 Published 2025-03-14 No fix listed CWE-862