Threat database

82 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	8.1	EPSS 0.3%	CVE-2026-62020TouchUp · PHP Remote File Inclusion High8.1EPSS 0.3%2026-10-10CVE Database V5CVE-2026-62020 CVE-2026-62020 is a high-severity vulnerability in Mikado-Themes TouchUp versions prior to 1.4. It involves an unauthenticated local file inclusion (LFI) flaw due to improper control of filenames in include/require statements, classified under CWE-98. This vulnerability allows an attacker to include local files on the server, potentially leading to full compromise of confidentiality, integrity, and availability. EPSS 0.3%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2026-10-10
High	8.1	EPSS 0.5%	CVE-2026-66657Biagiotti Core · PHP Remote File Inclusion High8.1EPSS 0.5%2026-08-13CVE Database V5CVE-2026-66657 Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions. EPSS 0.5%Vulnerability Mikado-Themes #cwe-98 #ghsa-mm92-69x7-89x2	CVE Database V5	2026-08-13
High	8.1	EPSS 0.5%	CVE-2026-66656Foton Core · PHP Remote File Inclusion High8.1EPSS 0.5%2026-08-13CVE Database V5CVE-2026-66656 Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions. EPSS 0.5%Vulnerability Mikado-Themes #cwe-98 #ghsa-xfv4-m392-36r9	CVE Database V5	2026-08-13
High	7.5	EPSS 0.5%	CVE-2026-57792Dør · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57792 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.1. EPSS 0.5%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2026-07-13
High	8.1	EPSS 0.5%	CVE-2026-52707Kastell · Path Traversal: '.../...//' High8.1EPSS 0.5%2026-06-17CVE Database V5CVE-2026-52707 CVE-2026-52707 is a high-severity vulnerability in Mikado-Themes Kastell versions up to and including 2.0. It allows unauthenticated attackers to perform local file inclusion via a path traversal flaw. This can lead to full confidentiality, integrity, and availability compromise of the affected system. No official patch or remediation guidance is currently available from the vendor. EPSS 0.5%Vulnerability Mikado-Themes #cwe-35	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40757Château · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40757 CVE-2026-40757 is a high severity vulnerability in Mikado-Themes Château versions up to and including 1.2.1. It involves unauthenticated PHP object injection due to deserialization of untrusted data (CWE-502). This flaw allows an attacker to potentially execute arbitrary code or cause a denial of service without requiring authentication. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40756Zoya · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40756 CVE-2026-40756 is a high severity vulnerability in Mikado-Themes Zoya versions 1.4 and earlier. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. This vulnerability allows an attacker to potentially execute arbitrary code or cause denial of service without requiring authentication. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40733ShiftUp · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40733 CVE-2026-40733 is a high-severity vulnerability in Mikado-Themes ShiftUp versions 1.3 and earlier. It involves unauthenticated PHP Object Injection due to deserialization of untrusted data, classified under CWE-502. This vulnerability allows remote attackers to potentially execute arbitrary code or cause denial of service without requiring authentication. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40753EasyMeals · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-17CVE Database V5CVE-2026-40753 CVE-2026-40753 is a high-severity vulnerability in Mikado-Themes EasyMeals versions up to and including 1.5.1. It involves unauthenticated PHP object injection due to deserialization of untrusted data (CWE-502). This vulnerability allows an attacker to execute arbitrary code or cause denial of service without requiring authentication. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-17
High	8.1	EPSS 0.5%	CVE-2026-40731ChapterOne · PHP Remote File Inclusion High8.1EPSS 0.5%2026-06-17CVE Database V5CVE-2026-40731 CVE-2026-40731 is a high-severity vulnerability affecting Mikado-Themes ChapterOne versions up to and including 1.7. It involves an unauthenticated Local File Inclusion (LFI) issue, classified under CWE-98, which relates to improper control of filenames in include/require statements in PHP programs. This vulnerability allows an attacker to include local files on the server without authentication, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. EPSS 0.5%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.5%	CVE-2026-39537Mikado Core · PHP Remote File Inclusion High8.1EPSS 0.5%2026-06-17CVE Database V5CVE-2026-39537 Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. EPSS 0.5%Vulnerability Mikado-Themes #cwe-98	CVE Database V5	2026-06-17
High	8.1	EPSS 0.4%	CVE-2026-40759Esmée · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40759 Unauthenticated PHP Object Injection in Esmée <= 1.4 versions. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-40755TechLink · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40755 Unauthenticated PHP Object Injection in TechLink <= 1.3 versions. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-40751Ashtanga · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40751 Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-16
High	8.1	EPSS 0.4%	CVE-2026-40739LuxeDrive · Deserialization of Untrusted Data High8.1EPSS 0.4%2026-06-16CVE Database V5CVE-2026-40739 Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions. EPSS 0.4%Vulnerability Mikado-Themes #cwe-502	CVE Database V5	2026-06-16
High	7.5	EPSS 0.5%	CVE-2026-39538Mikado Core · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High7.5EPSS 0.5%2026-04-08CVE Database V5CVE-2026-39538 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File Inclusion.This issue affects Mikado Core: from n/a through <= 1.6. EPSS 0.5%Vulnerability Mikado-Themes	CVE Database V5	2026-04-08
Medium	5.4	EPSS 0.3%	CVE-2026-32511Stål · Deserialization of Untrusted Data Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32511 Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7. EPSS 0.3%Vulnerability Mikado-Themes	CVE Database V5	2026-03-25
Medium	5.4	EPSS 0.3%	CVE-2026-32508Halstein · Deserialization of Untrusted Data Medium5.4EPSS 0.3%2026-03-25CVE Database V5CVE-2026-32508 Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8. EPSS 0.3%Vulnerability Mikado-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.6%	CVE-2026-27081Rosebud · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-03-25CVE Database V5CVE-2026-27081 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusion.This issue affects Rosebud: from n/a through <= 1.4. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2026-03-25
High	8.1	EPSS 0.6%	CVE-2026-27080Deston · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-03-25CVE Database V5CVE-2026-27080 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion.This issue affects Deston: from n/a through <= 1.0. EPSS 0.6%Vulnerability Mikado-Themes	CVE Database V5	2026-03-25

Showing 1–20 of 82 results