Skip to contentElated-themes vulnerabilities
Newest
- elated-themes frappeFrappe: Arbitrary Attachment Injection via add_attachments and upload_fileCVE-2026-481275.3 Medium
- elated-themes frappeFrappe: Possible Path Traversal and Local File Inclusion via Chrome PDF GeneratorCVE-2026-414827.1 High
- elated-themes frappeFrappe: check_safe_sql_query Permits SELECT INTO OUTFILECVE-2026-471992.3 Low
- elated-themes frappeFrappe: Unauthenticated User Enumeration via reset_passwordCVE-2026-585036.9 Medium
- elated-themes frappeFrappe: Unrestricted API access to save_reportCVE-2026-474225.3 Medium
- elated-themes audreyWordPress Audrey theme <= 1.5 - Local File Inclusion vulnerabilityCVE-2026-423828.1 High
- elated-themes singlemaltWordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerabilityCVE-2026-395768.1 High
- elated-themes konseptWordPress Konsept theme <= 1.9 - PHP Object Injection vulnerabilityCVE-2026-395568.1 High
- elated-themes solene coreWordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerabilityCVE-2026-395238.1 High
- elated-themes malmöWordPress Malmö theme <= 2.2 - Local File Inclusion vulnerabilityCVE-2026-395588.1 High
- elated-themes léonieWordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerabilityCVE-2026-407588.1 High
- elated-themes roisinWordPress Roisin theme <= 1.4 - PHP Object Injection vulnerabilityCVE-2026-407548.1 High
- elated-themes valianceWordPress Valiance theme <= 1.2 - PHP Object Injection vulnerabilityCVE-2026-395788.1 High
- elated-themes playroomWordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerabilityCVE-2026-395778.1 High
- elated-themes mr. seoWordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerabilityCVE-2026-395688.1 High
- elated-themes neobeatWordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerabilityCVE-2026-395578.1 High
- elated-themes fidalgoWordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerabilityCVE-2026-395548.1 High
- elated-themes aperitifWordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerabilityCVE-2026-395498.1 High
- elated-themes soleneWordPress Solene theme <= 3.4 - Local File Inclusion vulnerabilityCVE-2026-395228.1 High
- elated-themes frappeFrappe: Stored XSS in Frappe Report/List View via 'set_link_title_field_value'CVE-2026-535686.9 Medium
- elated-themes frappeFrappe: Lack of permissions checks in 'relink' and 'set_email_password' endpointsCVE-2026-500266.9 Medium
- elated-themes frappeFrappe: Broken Access Control on Private FilesCVE-2026-471825.3 Medium
- elated-themes frappeFrappe: IDOR in update_onboarding_stepCVE-2026-449765.3 Medium
- elated-themes frappeFrappe: Missing authorization on reset form toursCVE-2026-449755.3 Medium
- elated-themes frappeFrappe: DB Schema Enumeration via Frappe-Authorization-SourceCVE-2026-442066.9 Medium
- elated-themes frappeFrappe: Insecure Direct Object Reference for email accountsCVE-2026-442076.9 Medium
- elated-themes frappeFrappe: IDOR in `submit_discussion()`CVE-2026-442086.9 Medium
- elated-themes frappeFrappe: Stored Cross-Site Scripting (XSS) in User Profile through Image UploadCVE-2026-442056.9 Medium
- elated-themes frappeFrappe Vulnerable to Possible SQL Injection via get_blog_listCVE-2026-415816.9 Medium
- elated-themes frappeFrappe: Stored XSS in NoteCVE-2026-477396.9 Medium
- elated-themes askkaWordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerabilityCVE-2026-395558.1 High
- elated-themes töbelWordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerabilityCVE-2026-395518.1 High
- elated-themes aperitifWordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerabilityCVE-2026-395508.1 High
- elated-themes frappeFrappe has an Arbitrary File Read via Path Traversal in render_includeCVE-2026-393528.7 High
- elated-themes frappeFrappe Framework 16.10.0 - Stored DOM XSS in Multiple Field FormattersCVE-2026-38374.6 Medium
- elated-themes frappeFrappe Framework 16.10.0 - Stored DOM XSS in Tag Pill RendererCVE-2026-36734.6 Medium
- elated-themes frappeFrappe allows unrestricted Doctype access via API exploitCVE-2026-393516.9 Medium
- elated-themes frappeFrappe has a SQL injection in bulk_updateCVE-2026-356149.3 Critical
- elated-themes lerouxWordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerabilityCVE-2026-325075.4 Medium
- elated-themes the aisle coreWordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerabilityCVE-2026-270488.1 High
- elated-themes elated listingWordPress Elated Listing plugin <= 1.4 - Broken Access Control vulnerabilityCVE-2026-249726.5 Medium
- elated-themes search & goWordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerabilityCVE-2026-249719.8 Critical
- elated-themes roisinWordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerabilityCVE-2026-225128.1 High
- elated-themes neobeatWordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerabilityCVE-2026-225118.1 High
- elated-themes gioiaWordPress Gioia theme <= 1.4 - Local File Inclusion vulnerabilityCVE-2026-225098.1 High
- elated-themes amoliWordPress Amoli theme <= 1.0 - Local File Inclusion vulnerabilityCVE-2026-225068.1 High
- elated-themes lellaWordPress Lella theme <= 1.2 - Local File Inclusion vulnerabilityCVE-2026-224998.1 High
- elated-themes laurentWordPress Laurent theme <= 3.1 - Local File Inclusion vulnerabilityCVE-2026-224988.1 High
- elated-themes gaspardWordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerabilityCVE-2026-224938.1 High
- elated-themes frappeFrappe Workspace modification and stored XSS due to improper resource ownership checksCVE-2026-318795.1 Medium
- Show moreLoading…