Edge-themes vulnerabilities
25 CVEs and advisories name Edge-themes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-42777WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
- CVE-2026-104747WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability
- CVE-2025-15637WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability
- CVE-2026-66653WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability
- CVE-2026-57800WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability
- CVE-2026-57788WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability
- CVE-2026-40738WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability
- CVE-2026-40735WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability
- CVE-2026-40761WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability
- CVE-2026-40760WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability
- CVE-2026-40736WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability
- CVE-2026-39539WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability
- CVE-2026-32512WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability
- CVE-2026-32510WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability
- CVE-2026-32509WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability
- CVE-2026-32506WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability
- CVE-2025-69410WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability
- CVE-2025-69057WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability
- CVE-2025-69050WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability
- CVE-2025-68987WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability
- CVE-2025-64287WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability
- CVE-2025-62868WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
- CVE-2025-49889WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability
- CVE-2025-3278UrbanGo Membership <= 1.0.4 - Unauthenticated Privilege Escalation
- CVE-2025-1638Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover