Elated Themes vulnerabilities and threats

58 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.4%	CVE-2026-39522Solene (WordPress plugin) · PHP Remote File Inclusion High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-39522 Unauthenticated Local File Inclusion in Solene <= 3.4 versions. EPSS 0.4%Vulnerability Elated-Themes CWE-98	CVE Database V5	2026-06-16
High	8.1	EPSS 0.3%	CVE-2026-39555Askka (WordPress plugin) · Deserialization of Untrusted Data High8.1EPSS 0.3%2026-06-02CVE Database V5CVE-2026-39555 Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1. EPSS 0.3%Vulnerability Elated-Themes CWE-502	CVE Database V5	2026-06-02
High	8.1	EPSS 0.3%	CVE-2026-39551Töbel (WordPress plugin) · Deserialization of Untrusted Data High8.1EPSS 0.3%2026-06-02CVE Database V5CVE-2026-39551 Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1. EPSS 0.3%Vulnerability Elated-Themes CWE-502	CVE Database V5	2026-06-02
High	8.1	EPSS 0.3%	CVE-2026-39550Aperitif (WordPress plugin) · Deserialization of Untrusted Data High8.1EPSS 0.3%2026-06-02CVE Database V5CVE-2026-39550 Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6. EPSS 0.3%Vulnerability Elated-Themes CWE-502	CVE Database V5	2026-06-02
Medium	5.4	EPSS 0.2%	CVE-2026-32507Leroux (WordPress plugin) · Deserialization of Untrusted Data Medium5.4EPSS 0.2%2026-03-25CVE Database V5CVE-2026-32507 Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4. EPSS 0.2%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.4%	CVE-2026-27048The Aisle Core (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.4%2026-03-25CVE Database V5CVE-2026-27048 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The Aisle Core: from n/a through <= 2.0.5. EPSS 0.4%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.3%	CVE-2026-24972Elated Listing (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-03-25CVE Database V5CVE-2026-24972 Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elated Listing: from n/a through <= 1.4. EPSS 0.3%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
Critical	9.8	EPSS 0.3%	CVE-2026-24971Search & Go (WordPress plugin) · Incorrect Privilege Assignment Critical9.8EPSS 0.3%2026-03-25CVE Database V5CVE-2026-24971 Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8. EPSS 0.3%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22512Roisin (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22512 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP Local File Inclusion.This issue affects Roisin: from n/a through <= 1.2.1. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22511NeoBeat (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22511 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows PHP Local File Inclusion.This issue affects NeoBeat: from n/a through <= 1.2. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22509Gioia (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22509 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP Local File Inclusion.This issue affects Gioia: from n/a through <= 1.4. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22506Amoli (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22506 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through <= 1.0. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22499Lella (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22499 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.This issue affects Lella: from n/a through <= 1.2. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22498Laurent (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22498 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through <= 3.1. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.5%	CVE-2026-22493Gaspard (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-25CVE Database V5CVE-2026-22493 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusion.This issue affects Gaspard: from n/a through <= 1.3. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.6%	CVE-2026-22478FindAll (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-03-05CVE Database V5CVE-2026-22478 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows PHP Local File Inclusion.This issue affects FindAll: from n/a through <= 1.4. EPSS 0.6%Vulnerability Elated-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.5%	CVE-2026-22476Etchy (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2026-03-05CVE Database V5CVE-2026-22476 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.This issue affects Etchy: from n/a through <= 1.0. EPSS 0.5%Vulnerability Elated-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.6%	CVE-2026-22456Askka (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-03-05CVE Database V5CVE-2026-22456 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.This issue affects Askka: from n/a through <= 1.0. EPSS 0.6%Vulnerability Elated-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.6%	CVE-2026-22441Zentrum (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-03-05CVE Database V5CVE-2026-22441 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Zentrum zentrum allows PHP Local File Inclusion.This issue affects Zentrum: from n/a through <= 1.0. EPSS 0.6%Vulnerability Elated-Themes	CVE Database V5	2026-03-05
High	8.1	EPSS 0.6%	CVE-2026-22436Helvig (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.6%2026-03-05CVE Database V5CVE-2026-22436 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through <= 1.0. EPSS 0.6%Vulnerability Elated-Themes	CVE Database V5	2026-03-05

Page 2 of 3