Mikado-themes vulnerabilities
88 CVEs and advisories name Mikado-themes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-22393WordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-22391WordPress Cocco theme <= 1.5.1 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-22382WordPress PawFriends - Pet Shop and Veterinary WordPress Theme theme <= 1.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-67940WordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability
- CVE-2025-67938WordPress Biagiotti theme < 3.5.2 - Local File Inclusion vulnerability
- CVE-2025-54003WordPress Depot theme <= 1.16 - Local File Inclusion vulnerability
- CVE-2025-67937WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability
- CVE-2025-67936WordPress Curly theme < 3.3 - Local File Inclusion vulnerability
- CVE-2025-67935WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability
- CVE-2025-67934WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability
- CVE-2025-69034WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability
- CVE-2025-69032WordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-69030WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-67515WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability
- CVE-2025-66532WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability
- CVE-2025-39467WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability
- CVE-2025-39466WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability
- CVE-2025-64368WordPress Bard theme <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-9058Mikado Core <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2025-9061Wilmer Core <= 2.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2025-9057Biagiotti Core <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2025-49295WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability
- CVE-2025-49296WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability
- CVE-2025-49297WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability
- CVE-2025-39490WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability
- CVE-2025-39494WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability
- CVE-2025-39458WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability
- CVE-2024-12287Biagiotti Membership <= 1.0.2 - Authentication Bypass via biagiotti_membership_check_facebook_user