# cve.now: Elated-themes

The newest entries naming Elated-themes as an affected vendor (up to 200), of 58 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112820](https://cve.now/CVE-2026-112820.md): WordPress Academist Core plugin \<= 1.4.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-66566](https://cve.now/CVE-2026-66566.md): WordPress Ambient theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-78478](https://cve.now/CVE-2026-78478.md): Måne \<= 1.7 - Unauthenticated Local File Inclusion (CVSS 8.1)
- [CVE-2026-66670](https://cve.now/CVE-2026-66670.md): WordPress Måne theme \<= 1.7 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-66671](https://cve.now/CVE-2026-66671.md): WordPress Verdure Core plugin \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-65481](https://cve.now/CVE-2026-65481.md): WordPress Vino theme \<= 1.9 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-57793](https://cve.now/CVE-2026-57793.md): WordPress Flow theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-42382](https://cve.now/CVE-2026-42382.md): WordPress Audrey theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-39576](https://cve.now/CVE-2026-39576.md): WordPress SingleMalt theme \<= 1.5 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39556](https://cve.now/CVE-2026-39556.md): WordPress Konsept theme \<= 1.9 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39523](https://cve.now/CVE-2026-39523.md): WordPress Solene Core plugin \<= 2.3.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-39558](https://cve.now/CVE-2026-39558.md): WordPress Malmö theme \<= 2.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-40758](https://cve.now/CVE-2026-40758.md): WordPress Léonie theme \<= 1.2.1 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-40754](https://cve.now/CVE-2026-40754.md): WordPress Roisin theme \<= 1.4 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39578](https://cve.now/CVE-2026-39578.md): WordPress Valiance theme \<= 1.2 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39577](https://cve.now/CVE-2026-39577.md): WordPress Playroom theme \<= 1.4.1 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39568](https://cve.now/CVE-2026-39568.md): WordPress Mr. SEO theme \<= 2.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-39557](https://cve.now/CVE-2026-39557.md): WordPress NeoBeat theme \<= 1.7 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39554](https://cve.now/CVE-2026-39554.md): WordPress Fidalgo theme \<= 1.2.2 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39549](https://cve.now/CVE-2026-39549.md): WordPress Aperitif theme \<= 1.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-39522](https://cve.now/CVE-2026-39522.md): WordPress Solene theme \<= 3.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-39555](https://cve.now/CVE-2026-39555.md): WordPress Askka theme \<= 1.3.1 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39551](https://cve.now/CVE-2026-39551.md): WordPress Töbel theme \<= 1.8.1 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-39550](https://cve.now/CVE-2026-39550.md): WordPress Aperitif theme \<= 1.6 - PHP Object Injection vulnerability (CVSS 8.1)
- [CVE-2026-32507](https://cve.now/CVE-2026-32507.md): WordPress Leroux theme \< 1.4 - Arbitrary Object Instantiation vulnerability (CVSS 5.4)
- [CVE-2026-27048](https://cve.now/CVE-2026-27048.md): WordPress The Aisle Core plugin \<= 2.0.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-24972](https://cve.now/CVE-2026-24972.md): WordPress Elated Listing plugin \<= 1.4 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2026-24971](https://cve.now/CVE-2026-24971.md): WordPress Search & Go theme \<= 2.8 - Privilege Escalation vulnerability (CVSS 9.8)
- [CVE-2026-22512](https://cve.now/CVE-2026-22512.md): WordPress Roisin theme \<= 1.2.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22511](https://cve.now/CVE-2026-22511.md): WordPress NeoBeat theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22509](https://cve.now/CVE-2026-22509.md): WordPress Gioia theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22506](https://cve.now/CVE-2026-22506.md): WordPress Amoli theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22499](https://cve.now/CVE-2026-22499.md): WordPress Lella theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22498](https://cve.now/CVE-2026-22498.md): WordPress Laurent theme \<= 3.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22493](https://cve.now/CVE-2026-22493.md): WordPress Gaspard theme \<= 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22478](https://cve.now/CVE-2026-22478.md): WordPress FindAll theme \<= 1.4 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22476](https://cve.now/CVE-2026-22476.md): WordPress Etchy theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22456](https://cve.now/CVE-2026-22456.md): WordPress Askka theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22441](https://cve.now/CVE-2026-22441.md): WordPress Zentrum theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22436](https://cve.now/CVE-2026-22436.md): WordPress Helvig theme \<= 1.0 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-22425](https://cve.now/CVE-2026-22425.md): WordPress Sweet Jane theme \<= 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2026-24609](https://cve.now/CVE-2026-24609.md): WordPress Laurent theme \<= 3.1 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-24608](https://cve.now/CVE-2026-24608.md): WordPress Laurent Core plugin \<= 2.4.1 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2026-22426](https://cve.now/CVE-2026-22426.md): WordPress Sweet Jane theme \<= 1.2 - Insecure Direct Object References (IDOR) vulnerability (CVSS 5.4)
- [CVE-2025-69049](https://cve.now/CVE-2025-69049.md): WordPress Töbel theme \<= 1.6 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69005](https://cve.now/CVE-2025-69005.md): WordPress Search & Go theme \<= 2.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-67941](https://cve.now/CVE-2025-67941.md): WordPress The Aisle theme \< 2.9.1 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-67920](https://cve.now/CVE-2025-67920.md): WordPress Neo Ocular theme \< 1.2 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-69083](https://cve.now/CVE-2025-69083.md): WordPress Frappé theme \<= 1.8 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-13613](https://cve.now/CVE-2025-13613.md): Elated Membership \<= 1.2 - Authentication Bypass via Social Login (CVSS 9.8)
- [CVE-2025-66534](https://cve.now/CVE-2025-66534.md): WordPress The Aisle theme \<= 2.9 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-13539](https://cve.now/CVE-2025-13539.md): FindAll Membership \<= 1.0.4 - Authentication Bypass via Social Login (CVSS 9.8)
- [CVE-2025-13538](https://cve.now/CVE-2025-13538.md): FindAll Listing \<= 1.0.5 - Unauthenticated Privilege Escalation (CVSS 9.8)
- [CVE-2025-62067](https://cve.now/CVE-2025-62067.md): WordPress Savory theme \<= 2.5 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-62064](https://cve.now/CVE-2025-62064.md): WordPress Search & Go theme \<= 2.7 - Broken Authentication vulnerability (CVSS 9.8)
- [CVE-2025-62055](https://cve.now/CVE-2025-62055.md): WordPress Academist theme \< 1.3 - Local File Inclusion vulnerability (CVSS 8.1)
- [CVE-2025-11522](https://cve.now/CVE-2025-11522.md): Search & Go - Directory WordPress Theme \<= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover (CVSS 9.8)
- [CVE-2025-1671](https://cve.now/CVE-2025-1671.md): Academist Membership \<= 1.1.6 - Authentication Bypass via Account Takeover (CVSS 9.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/elated-themes
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.