# cve.now: Axiomthemes

The newest entries naming Axiomthemes as an affected vendor (up to 200), of 109 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112854](https://cve.now/CVE-2026-112854.md): WordPress Holistic Center theme \<= 1.2.6 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-112853](https://cve.now/CVE-2026-112853.md): WordPress Hallelujah theme \<= 1.1.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-112857](https://cve.now/CVE-2026-112857.md): WordPress Reprizo theme \<= 1.0.8 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-112858](https://cve.now/CVE-2026-112858.md): WordPress Rhodos theme \<= 1.3.3 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-112855](https://cve.now/CVE-2026-112855.md): WordPress Redy theme \<= 1.3.5 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66569](https://cve.now/CVE-2026-66569.md): WordPress Kicker theme \<= 2.2.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66568](https://cve.now/CVE-2026-66568.md): WordPress Original theme \<= 1.9.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-66565](https://cve.now/CVE-2026-66565.md): WordPress FC United theme \<= 1.1.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-42704](https://cve.now/CVE-2026-42704.md): WordPress Kids Care theme \<= 3.2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-93945](https://cve.now/CVE-2026-93945.md): WordPress Balance theme \<= 1.12.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-93927](https://cve.now/CVE-2026-93927.md): WordPress Veto theme \<= 1.6.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65581](https://cve.now/CVE-2026-65581.md): WordPress AI ANN theme \<= 1.29.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65579](https://cve.now/CVE-2026-65579.md): WordPress Agricola theme \<= 1.21.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65572](https://cve.now/CVE-2026-65572.md): WordPress A.Williams theme \<= 1.3.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-65571](https://cve.now/CVE-2026-65571.md): WordPress 69 Clothing theme \<= 1.2.11.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-27377](https://cve.now/CVE-2026-27377.md): WordPress QuickCal - Appointment Booking Calendar for WordPress plugin \<= 1.0.16 - Broken Access Control vulnerability (CVSS 6.7)
- [CVE-2026-57738](https://cve.now/CVE-2026-57738.md): WordPress 777 theme \<= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22326](https://cve.now/CVE-2026-22326.md): WordPress Reprizo theme \<= 1.0.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22325](https://cve.now/CVE-2026-22325.md): WordPress Promo theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69369](https://cve.now/CVE-2025-69369.md): WordPress Racquet theme \<= 1.12.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58897](https://cve.now/CVE-2025-58897.md): WordPress Fermentio theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58707](https://cve.now/CVE-2025-58707.md): WordPress Spin theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58705](https://cve.now/CVE-2025-58705.md): WordPress Crafti theme \<= 1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53440](https://cve.now/CVE-2025-53440.md): WordPress Confidant theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22500](https://cve.now/CVE-2026-22500.md): WordPress m2 | Construction and Tools Store theme \<= 1.1.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-28129](https://cve.now/CVE-2026-28129.md): WordPress Little Birdies theme \<= 1.3.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28119](https://cve.now/CVE-2026-28119.md): WordPress Nirvana theme \<= 2.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28118](https://cve.now/CVE-2026-28118.md): WordPress Welldone theme \<= 2.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28117](https://cve.now/CVE-2026-28117.md): WordPress smart SEO theme \<= 2.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28079](https://cve.now/CVE-2026-28079.md): WordPress Conquerors theme \<= 1.2.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-28024](https://cve.now/CVE-2026-28024.md): WordPress Helion theme \<= 1.1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27326](https://cve.now/CVE-2026-27326.md): WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme \<= 1.2.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-27098](https://cve.now/CVE-2026-27098.md): WordPress Au Pair Agency - Babysitting & Nanny Theme theme \<= 1.2.2 - Deserialization of untrusted data vulnerability (CVSS 8.1)
- [CVE-2026-22501](https://cve.now/CVE-2026-22501.md): WordPress Mounthood theme \<= 1.3.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22475](https://cve.now/CVE-2026-22475.md): WordPress Estate theme \<= 1.3.4 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-22370](https://cve.now/CVE-2026-22370.md): WordPress Marveland theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22368](https://cve.now/CVE-2026-22368.md): WordPress Redy theme \<= 1.0.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22366](https://cve.now/CVE-2026-22366.md): WordPress Jude theme \<= 1.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22365](https://cve.now/CVE-2026-22365.md): WordPress Soleng theme \<= 1.0.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22364](https://cve.now/CVE-2026-22364.md): WordPress SevenTrees theme \<=1.0.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22363](https://cve.now/CVE-2026-22363.md): WordPress Rhodos theme \<= 1.3.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22362](https://cve.now/CVE-2026-22362.md): WordPress Photolia theme \<= 1.0.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22361](https://cve.now/CVE-2026-22361.md): WordPress A-Mart theme \<= 1.0.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69409](https://cve.now/CVE-2025-69409.md): WordPress PJ | Life & Business Coaching theme \<= 3.0.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-50003](https://cve.now/CVE-2025-50003.md): WordPress Amuli theme \<= 2.3.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60067](https://cve.now/CVE-2025-60067.md): WordPress Giardino theme \<= 1.1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60066](https://cve.now/CVE-2025-60066.md): WordPress Katelyn theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60065](https://cve.now/CVE-2025-60065.md): WordPress Pinevale theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60064](https://cve.now/CVE-2025-60064.md): WordPress Renewal theme \<= 1.2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60063](https://cve.now/CVE-2025-60063.md): WordPress Rosalinda theme \<= 1.2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60061](https://cve.now/CVE-2025-60061.md): WordPress Kicker theme \<= 2.2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60060](https://cve.now/CVE-2025-60060.md): WordPress Pubzinne theme \<= 1.0.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60059](https://cve.now/CVE-2025-60059.md): WordPress smart SEO theme \<= 2.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60050](https://cve.now/CVE-2025-60050.md): WordPress Panda theme \<= 1.21 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60049](https://cve.now/CVE-2025-60049.md): WordPress Soleil theme \<= 1.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60048](https://cve.now/CVE-2025-60048.md): WordPress Tripster theme \<= 1.0.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60047](https://cve.now/CVE-2025-60047.md): WordPress IPharm theme \<= 1.2.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-60046](https://cve.now/CVE-2025-60046.md): WordPress HeartStar theme \<= 1.0.14 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58950](https://cve.now/CVE-2025-58950.md): WordPress Lione theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58949](https://cve.now/CVE-2025-58949.md): WordPress Spock theme \<= 1.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58948](https://cve.now/CVE-2025-58948.md): WordPress Aromatica theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58947](https://cve.now/CVE-2025-58947.md): WordPress Athos theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58946](https://cve.now/CVE-2025-58946.md): WordPress Vocal theme \<= 1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58945](https://cve.now/CVE-2025-58945.md): WordPress EcoGrow theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58944](https://cve.now/CVE-2025-58944.md): WordPress Manufactory theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58943](https://cve.now/CVE-2025-58943.md): WordPress Agricola theme \<= 1.1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58942](https://cve.now/CVE-2025-58942.md): WordPress Dwell theme \<= 1.7.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58941](https://cve.now/CVE-2025-58941.md): WordPress Fabric theme \<= 1.5.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58940](https://cve.now/CVE-2025-58940.md): WordPress Basil theme \<= 1.3.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58937](https://cve.now/CVE-2025-58937.md): WordPress Tacticool theme \<= 1.0.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58936](https://cve.now/CVE-2025-58936.md): WordPress Catamaran theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58935](https://cve.now/CVE-2025-58935.md): WordPress Lunna theme \<= 1.15 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58934](https://cve.now/CVE-2025-58934.md): WordPress The Gig theme \<= 1.18.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58933](https://cve.now/CVE-2025-58933.md): WordPress Anubis theme \<= 1.25 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58932](https://cve.now/CVE-2025-58932.md): WordPress Prisma theme \<= 1.10 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58931](https://cve.now/CVE-2025-58931.md): WordPress Palatio theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58930](https://cve.now/CVE-2025-58930.md): WordPress FitFlex theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58929](https://cve.now/CVE-2025-58929.md): WordPress Pantry theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58928](https://cve.now/CVE-2025-58928.md): WordPress Heart theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58927](https://cve.now/CVE-2025-58927.md): WordPress Stallion theme \<= 1.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58926](https://cve.now/CVE-2025-58926.md): WordPress Cerebrum theme \<= 1.12 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58925](https://cve.now/CVE-2025-58925.md): WordPress Neptunus theme \<= 1.0.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58923](https://cve.now/CVE-2025-58923.md): WordPress Critique theme \<= 1.17 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58894](https://cve.now/CVE-2025-58894.md): WordPress Good Mood theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58893](https://cve.now/CVE-2025-58893.md): WordPress Alright theme \<= 1.6.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58889](https://cve.now/CVE-2025-58889.md): WordPress Towny theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58803](https://cve.now/CVE-2025-58803.md): WordPress Algenix theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58709](https://cve.now/CVE-2025-58709.md): WordPress Legacy theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58708](https://cve.now/CVE-2025-58708.md): WordPress 777 theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58706](https://cve.now/CVE-2025-58706.md): WordPress Woo Hoo theme \<= 1.25 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-58225](https://cve.now/CVE-2025-58225.md): WordPress Paragon theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53453](https://cve.now/CVE-2025-53453.md): WordPress Hygia theme \<= 1.16 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53449](https://cve.now/CVE-2025-53449.md): WordPress Convex theme \<= 1.11 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53448](https://cve.now/CVE-2025-53448.md): WordPress Rally theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53447](https://cve.now/CVE-2025-53447.md): WordPress Assembly theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53446](https://cve.now/CVE-2025-53446.md): WordPress Beautique theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53445](https://cve.now/CVE-2025-53445.md): WordPress Catwalk theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53443](https://cve.now/CVE-2025-53443.md): WordPress Smash theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53442](https://cve.now/CVE-2025-53442.md): WordPress Rentic theme \<= 1.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53441](https://cve.now/CVE-2025-53441.md): WordPress Greeny theme \<= 2.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53439](https://cve.now/CVE-2025-53439.md): WordPress Harper theme \<= 1.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53438](https://cve.now/CVE-2025-53438.md): WordPress FitLine theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-53435](https://cve.now/CVE-2025-53435.md): WordPress Plan My Day theme \<= 1.1.13 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-28953](https://cve.now/CVE-2025-28953.md): WordPress smart SEO plugin \<= 4.0 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-60226](https://cve.now/CVE-2025-60226.md): WordPress White Rabbit theme \<= 1.5.2 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-49401](https://cve.now/CVE-2025-49401.md): WordPress smart SEO Plugin \<= 4.0 - Privilege Escalation Vulnerability (CVSS 9.8)
- [CVE-2025-49434](https://cve.now/CVE-2025-49434.md): WordPress Cars4Rent Theme \<= 1.4.2 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-26592](https://cve.now/CVE-2025-26592.md): WordPress Lab Theme \<= 1.0.0 - Local File Inclusion Vulnerability (CVSS 8.1)
- [CVE-2025-49073](https://cve.now/CVE-2025-49073.md): WordPress Sweet Dessert \< 1.1.13 - PHP Object Injection Vulnerability (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/axiomthemes
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.