Elated-Themes
47 CVEs across 40 Elated-Themes products. Browse Elated-Themes vulnerabilities, severities, and proof-of-concept exploits.
Elated-Themes products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-65481 | High | 7.5 | 2026-07-23 | Contributor Local File Inclusion in Vino <= 1.9 versions. |
CVE-2026-57793 | High | 7.5 | 2026-07-13 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Loc… |
CVE-2026-42382 | High | 8.1 | 2026-07-02 | Unauthenticated Local File Inclusion in Audrey <= 1.5 versions. |
CVE-2026-39576 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions. |
CVE-2026-39556 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Konsept <= 1.9 versions. |
CVE-2026-39523 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions. |
CVE-2026-40758 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions. |
CVE-2026-40754 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Roisin <= 1.4 versions. |
CVE-2026-39578 | Medium | 5.5 | 2026-06-17 | Unauthenticated PHP Object Injection in Valiance <= 1.2 versions. |
CVE-2026-39577 | Medium | 5.5 | 2026-06-17 | Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions. |
CVE-2026-39568 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions. |
CVE-2026-39558 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Malmö <= 2.2 versions. |
CVE-2026-39557 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions. |
CVE-2026-39554 | High | 8.1 | 2026-06-17 | Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions. |
CVE-2026-39549 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions. |
CVE-2026-39522 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Solene <= 3.4 versions. |
CVE-2026-39555 | High | 8.1 | 2026-06-02 | Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1. |
CVE-2026-39551 | High | 8.1 | 2026-06-02 | Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1. |
CVE-2026-39550 | High | 8.1 | 2026-06-02 | Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6. |
CVE-2026-32507 | Medium | 5.4 | 2026-03-25 | Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4. |
CVE-2026-27048 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-… |
CVE-2026-24972 | Medium | 6.5 | 2026-03-25 | Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This i… |
CVE-2026-24971 | Critical | 9.8 | 2026-03-25 | Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through… |
CVE-2026-22512 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP… |
CVE-2026-22511 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows P… |
CVE-2026-22509 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP L… |
CVE-2026-22506 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP L… |
CVE-2026-22499 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP L… |
CVE-2026-22498 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows P… |
CVE-2026-22493 | High | 8.1 | 2026-03-25 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows P… |
CVE-2026-22478 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows P… |
CVE-2026-22476 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP L… |
CVE-2026-22456 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP L… |
CVE-2026-22441 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Zentrum zentrum allows P… |
CVE-2026-22436 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP… |
CVE-2026-22425 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Sweet Jane sweetjane all… |
CVE-2026-24609 | High | 7.5 | 2026-01-23 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows P… |
CVE-2026-24608 | High | 7.5 | 2026-01-23 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent Core laurent-cor… |
CVE-2026-22426 | Medium | 5.4 | 2026-01-22 | Authorization Bypass Through User-Controlled Key vulnerability in Elated-Themes Sweet Jane sweetjane allows Exploiting Incorrectly Configured Access Control Se… |
CVE-2025-69049 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Töbel tobel allows PHP L… |
CVE-2025-69005 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Search & Go search-and-g… |
CVE-2025-67941 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle theaisle allow… |
CVE-2025-67920 | High | 8.1 | 2026-01-08 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Neo Ocular neoocular all… |
CVE-2025-69083 | High | 8.1 | 2026-01-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Frappé frappe allows PHP… |
CVE-2025-66534 | Medium | 4.3 | 2025-12-09 | Missing Authorization vulnerability in Elated-Themes The Aisle theaisle allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-62067 | High | 8.1 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Savory savory.This issue… |
CVE-2025-62064 | Critical | 9.8 | 2025-11-06 | Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This is… |
CVE-2025-62055 | High | 8.1 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist academist.This… |
CVE-2025-11522 | Critical | 9.8 | 2025-10-09 | The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and includin… |
CVE-2025-1671 | Critical | 9.8 | 2025-03-01 | The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_m… |