Threat database

24 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.3%	CVE-2026-42777Aalto · PHP Remote File Inclusion High8.1EPSS 0.3%2026-10-10CVE Database V5CVE-2026-42777 CVE-2026-42777 is a high-severity vulnerability in Edge-Themes Aalto versions 1.8 and earlier that allows unauthenticated local file inclusion due to improper control of filenames in include/require statements. This flaw can lead to remote file inclusion attacks, potentially resulting in full compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.3%Vulnerability Edge-Themes #cwe-98	CVE Database V5	2026-10-10
High	8.1	EPSS 0.3%	CVE-2026-104747Haaken · Deserialization of Untrusted Data High8.1EPSS 0.3%2026-10-06CVE Database V5CVE-2026-104747 Unauthenticated PHP Object Injection in Haaken <= 1.5 versions. EPSS 0.3%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-10-06
High	8.1	EPSS 0.5%	CVE-2026-66653Barista · PHP Remote File Inclusion High8.1EPSS 0.5%2026-08-13CVE Database V5CVE-2026-66653 Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions. EPSS 0.5%Vulnerability Edge-Themes #cwe-98 #ghsa-23x3-w8rc-9vq7	CVE Database V5	2026-08-13
High	7.5	EPSS 0.5%	CVE-2026-57800Overworld · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57800 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5. EPSS 0.5%Vulnerability Edge-Themes #cwe-98	CVE Database V5	2026-07-13
High	7.5	EPSS 0.5%	CVE-2026-57788Aalto · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57788 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.This issue affects Aalto: from n/a through <= 1.8. EPSS 0.5%Vulnerability Edge-Themes #cwe-98	CVE Database V5	2026-07-13
High	8.1	EPSS 0.4%	CVE-2026-40738Eldon · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40738 CVE-2026-40738 is a high-severity vulnerability affecting Edge-Themes Eldon versions up to and including 1.4.1. It involves unauthenticated PHP object injection due to deserialization of untrusted data (CWE-502). This vulnerability allows an attacker to execute arbitrary code without authentication, impacting confidentiality, integrity, and availability. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40735Reina · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40735 CVE-2026-40735 is a high-severity vulnerability in Edge-Themes Reina versions up to and including 2.1. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data (CWE-502). This vulnerability allows an attacker to potentially execute arbitrary code or cause denial of service without requiring authentication. No official patch or remediation guidance is currently available from the vendor. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40761Valeska · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40761 Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-40760Behold · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40760 Unauthenticated PHP Object Injection in Behold <= 1.5 versions. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-40736Laurits · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40736 Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-39539Alloggio - Hotel Booking · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-39539 Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions. EPSS 0.4%Vulnerability Edge-Themes #cwe-502	CVE Database V5	2026-06-16
Critical	9.8	EPSS 0.6%	CVE-2026-32512Pelicula · Deserialization of Untrusted Data Critical9.8EPSS 0.6%2026-03-25CVE Database V5CVE-2026-32512 Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a through < 1.10. EPSS 0.6%Vulnerability Edge-Themes	CVE Database V5	2026-03-25
Medium	5.4	EPSS 0.3%	CVE-2026-32510Kamperen · Deserialization of Untrusted Data Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32510 Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3. EPSS 0.3%Vulnerability Edge-Themes	CVE Database V5	2026-03-25
Medium	5.4	EPSS 0.3%	CVE-2026-32509Gracey · Deserialization of Untrusted Data Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32509 Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4. EPSS 0.3%Vulnerability Edge-Themes	CVE Database V5	2026-03-25
Medium	5.4	EPSS 0.3%	CVE-2026-32506Archicon · Deserialization of Untrusted Data Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32506 Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7. EPSS 0.3%Vulnerability Edge-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.6%	CVE-2025-69410Belletrist · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-02-20CVE Database V5CVE-2025-69410 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2. EPSS 0.6%Vulnerability Edge-Themes	CVE Database V5	2026-02-20
High	8.1	EPSS 0.6%	CVE-2025-69057Eldon · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-01-22CVE Database V5CVE-2025-69057 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through <= 1.0. EPSS 0.6%Vulnerability Edge-Themes	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-69050Overworld · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2026-01-22CVE Database V5CVE-2025-69050 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.3. EPSS 0.5%Vulnerability Edge-Themes	CVE Database V5	2026-01-22
High	7.5	EPSS 0.5%	CVE-2025-68987Cinerama · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2025-12-30CVE Database V5CVE-2025-68987 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows PHP Local File Inclusion.This issue affects Cinerama: from n/a through <= 2.9. EPSS 0.5%Vulnerability Edge-Themes	CVE Database V5	2025-12-30
High	8.1	EPSS 0.4%	CVE-2025-64287Alloggio - Hotel Booking · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.4%2025-11-06CVE Database V5CVE-2025-64287 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a through <= 1.8. EPSS 0.4%Vulnerability Edge-Themes	CVE Database V5	2025-11-06

Showing 1–20 of 24 results