Skip to contentElated-themes vulnerabilities
Newest
- elated-themes frappeFrappe: Possible SSRF by any authenticated userCVE-2026-318785.0 Medium
- elated-themes frappeFrappe SQL Injection due to improper field sanitizationCVE-2026-318779.3 Critical
- elated-themes frappeFrappe: Possibility of SQL Injection due to improper fieldname sanitizationCVE-2026-290816.5 Medium
- elated-themes frappeFrappe: Broken Access Control in DocShareCVE-2026-290777.1 High
- elated-themes frappeFrappe: Stored XSS in avatar_macro.htmlCVE-2026-284361.3 Low
- elated-themes findallWordPress FindAll theme <= 1.4 - Local File Inclusion vulnerabilityCVE-2026-224788.1 High
- elated-themes etchyWordPress Etchy theme <= 1.0 - Local File Inclusion vulnerabilityCVE-2026-224768.1 High
- elated-themes askkaWordPress Askka theme <= 1.0 - Local File Inclusion vulnerabilityCVE-2026-224568.1 High
- elated-themes zentrumWordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerabilityCVE-2026-224418.1 High
- elated-themes helvigWordPress Helvig theme <= 1.0 - Local File Inclusion vulnerabilityCVE-2026-224368.1 High
- elated-themes sweet janeWordPress Sweet Jane theme <= 1.2 - Local File Inclusion vulnerabilityCVE-2026-224258.1 High
- elated-themes frappeFrappe Affected by XSS and Open Redirect in Sign UpCVE-2026-259566.1 Medium
- elated-themes laurentWordPress Laurent theme <= 3.1 - Local File Inclusion vulnerabilityCVE-2026-246097.5 High
- elated-themes laurent coreWordPress Laurent Core plugin <= 2.4.1 - Local File Inclusion vulnerabilityCVE-2026-246087.5 High
- elated-themes sweet janeWordPress Sweet Jane theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2026-224265.4 Medium
- elated-themes töbelWordPress Töbel theme <= 1.6 - Local File Inclusion vulnerabilityCVE-2025-690498.1 High
- elated-themes search & goWordPress Search & Go theme <= 2.8 - Local File Inclusion vulnerabilityCVE-2025-690058.1 High
- elated-themes the aisleWordPress The Aisle theme < 2.9.1 - Local File Inclusion vulnerabilityCVE-2025-679418.1 High
- elated-themes neo ocularWordPress Neo Ocular theme < 1.2 - Local File Inclusion vulnerabilityCVE-2025-679208.1 High
- elated-themes frappe, frappé +1 moreWordPress Frappé theme <= 1.8 - Local File Inclusion vulnerabilityCVE-2025-690838.1 High
- elated-themes frappeCertain Frappe requests are vulnerable to Path TraversalCVE-2025-689537.5 High
- elated-themes frappeFrappe may be vulnerable remote code execution due to server-side template injectionCVE-2025-689299.1 Critical
- elated-themes the aisleWordPress The Aisle theme <= 2.9 - Broken Access Control vulnerabilityCVE-2025-665344.3 Medium
- elated-themes frappeFrappe vulnerable to a path traversal allowing reading certain filesCVE-2025-662066.8 Medium
- elated-themes frappeFrappe has the possibility of SQL Injection due to improper validationsCVE-2025-662057.1 High
- elated-themes savoryWordPress Savory theme <= 2.5 - Local File Inclusion vulnerabilityCVE-2025-620678.1 High
- elated-themes search & goWordPress Search & Go theme <= 2.7 - Broken Authentication vulnerabilityCVE-2025-620649.8 Critical
- elated-themes academistWordPress Academist theme < 1.3 - Local File Inclusion vulnerabilityCVE-2025-620558.1 High
- elated-themes frappeFrappe has an Open Redirect on Login PageCVE-2025-624076.1 Medium
- elated-themes search & go - directory wordpress themeSearch & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account TakeoverCVE-2025-115229.8 Critical
- elated-themes frappeFrappe has potential SQL Injection due to missing validationCVE-2025-583758.1 High
- elated-themes frappeFrappe has the possibility of SQL Injection due to improper validationsCVE-2025-557328.7 High
- elated-themes frappeFrappe has the possibility of Authenticated SQL Injection due to improper validationsCVE-2025-557316.3 Medium
- elated-themes frappeFrappe account takeover via password reset token leakageCVE-2025-528988.7 High
- elated-themes frappeFrappe authenticated XSS via data importCVE-2025-528968.6 High
- elated-themes frappeFrappe possibility of SQL injection due to improper validationsCVE-2025-528958.7 High
- elated-themes frappeFrappe has possibility of SQL injection due to improper validationsCVE-2025-30217Fix available6.6 Medium
- elated-themes frappeFrappe vulnerable to information disclosure leading to account takeoverCVE-2025-30214Fix available8.0 High
- elated-themes frappeFrappe has Possibility of Remote Code Execution due to improper validationCVE-2025-30213Fix available6.3 Medium
- elated-themes frappeFrappe has possibility of SQL injection due to improper validationsCVE-2025-30212Fix available6.6 Medium
- elated-themes academist membershipAcademist Membership <= 1.1.6 - Authentication Bypass via Account TakeoverCVE-2025-16719.8 Critical
- elated-themes frappeFrappe vuilnerable to an open redirect on login pageCVE-2024-340746.1 Medium
- elated-themes frappeFrappe File Permissions can by bypassed using certain endpointsCVE-2024-271058.1 High
- elated-themes frappeFrappe SQL Injection from reporting logicCVE-2024-248137.5 High
- elated-themes frappeFrappe Authenticated Reflected Cross site scripting (XSS) in portal pagesCVE-2024-248125.4 Medium
- elated-themes frappeFrappe vulnerable to HTML injection by any Desk userCVE-2023-46127EPSS 41.3%5.4 Medium
- elated-themes frappePossibility limited SQL injection due to insufficient validation in FrappeCVE-2023-413284.2 Medium
- elated-themes frappeFrappe version 14.10.0 allows an external attacker to remotely obtain arbitrary local files. This...CVE-2022-417126.5 Medium
- elated-themes frappeFrappe Search navbar_search.html cross site scriptingCVE-2022-39883.5 Low
- frappe erpnext, elated-themes frappe +1 moreERPNext - Improper user access conrolCVE-2022-230555.5 Medium
- Show moreLoading…