Threat database

82 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.3%	CVE-2026-22393Curly · Authorization Bypass Through User-Controlled Key Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2026-22393 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Curly: from n/a through <= 3.3. EPSS 0.3%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.3%	CVE-2026-22391Cocco · Authorization Bypass Through User-Controlled Key Medium5.4EPSS 0.3%2026-01-22CVE Database V5CVE-2026-22391 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cocco: from n/a through <= 1.5.1. EPSS 0.3%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
Medium	5.4	EPSS 0.1%	CVE-2026-22382PawFriends - Pet Shop and Veterinary WordPress Theme · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2026-01-22CVE Database V5CVE-2026-22382 Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Cross Site Request Forgery.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3. EPSS 0.1%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.6%	CVE-2025-67940Powerlift · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-67940 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through < 3.2.1. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.6%	CVE-2025-67938Biagiotti · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-67938 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Biagiotti biagiotti allows PHP Local File Inclusion.This issue affects Biagiotti: from n/a through < 3.5.2. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.6%	CVE-2025-54003Depot · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-54003 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Depot depot allows PHP Local File Inclusion.This issue affects Depot: from n/a through <= 1.16. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-67937Hendon · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67937 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a through < 1.7. EPSS 0.5%Vulnerability Mikado-Themes	CVE Database V5	2026-01-08
High	8.1	EPSS 0.5%	CVE-2025-67936Curly · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67936 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP Local File Inclusion.This issue affects Curly: from n/a through < 3.3. EPSS 0.5%Vulnerability Mikado-Themes	CVE Database V5	2026-01-08
High	8.1	EPSS 0.5%	CVE-2025-67935Optimize · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67935 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4. EPSS 0.5%Vulnerability Mikado-Themes	CVE Database V5	2026-01-08
High	8.1	EPSS 0.5%	CVE-2025-67934Wellspring · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-08CVE Database V5CVE-2025-67934 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring allows PHP Local File Inclusion.This issue affects Wellspring: from n/a through < 2.8. EPSS 0.5%Vulnerability Mikado-Themes	CVE Database V5	2026-01-08
High	8.1	EPSS 0.4%	CVE-2025-69034Lekker · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.4%2025-12-30CVE Database V5CVE-2025-69034 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File Inclusion.This issue affects Lekker: from n/a through <= 1.8. EPSS 0.4%Vulnerability Mikado-Themes	CVE Database V5	2025-12-30
Medium	5.4	EPSS 0.2%	CVE-2025-69032FiveStar · Authorization Bypass Through User-Controlled Key Medium5.4EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69032 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1.7. EPSS 0.2%Vulnerability Mikado-Themes	CVE Database V5	2025-12-30
Medium	5.4	EPSS 0.2%	CVE-2025-69030Backpack Traveler · Authorization Bypass Through User-Controlled Key Medium5.4EPSS 0.2%2025-12-30CVE Database V5CVE-2025-69030 Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3. EPSS 0.2%Vulnerability Mikado-Themes	CVE Database V5	2025-12-30
High	8.8	EPSS 0.4%	CVE-2025-67515Wilmër · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.8EPSS 0.4%2025-12-09CVE Database V5CVE-2025-67515 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.5. EPSS 0.4%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2025-12-09
Medium	4.3	EPSS 0.3%	CVE-2025-66532Powerlift · Missing Authorization Medium4.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-66532 Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1. EPSS 0.3%Vulnerability Mikado-Themes #cwe-862	CVE Database V5	2025-12-09
High	8.1	EPSS 0.6%	CVE-2025-39467Wanderland · Path Traversal: '.../...//' High8.1EPSS 0.6%2025-11-06CVE Database V5CVE-2025-39467 Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1. EPSS 0.6%Vulnerability Mikado-Themes #cwe-35	CVE Database V5	2025-11-06
High	8.1	EPSS 0.7%	CVE-2025-39466Dør · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.7%2025-11-06CVE Database V5CVE-2025-39466 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4. EPSS 0.7%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2025-11-06
Medium	5.4	EPSS 0.1%	CVE-2025-64368Bard · Cross-Site Request Forgery (CSRF) Medium5.4EPSS 0.1%2025-10-31CVE Database V5CVE-2025-64368 Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6. EPSS 0.1%Vulnerability Mikado-Themes	CVE Database V5	2025-10-31
High	8.1	EPSS 0.6%	CVE-2025-49295MediClinic · Path Traversal: '.../...//' High8.1EPSS 0.6%2025-06-09CVE Database V5CVE-2025-49295 Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2025-06-09
High	8.1	EPSS 0.6%	CVE-2025-49296GrandPrix · Path Traversal: '.../...//' High8.1EPSS 0.6%2025-06-09CVE Database V5CVE-2025-49296 Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <= 1.6. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2025-06-09

Showing 61–80 of 82 results