Fuelthemes
9 CVEs across 7 Fuelthemes products. Browse Fuelthemes vulnerabilities, severities, and proof-of-concept exploits.
Fuelthemes products with known CVEs
Fuelthemes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-57690 | Medium | 4.3 | 2026-07-02 | Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions. |
CVE-2026-57689 | Medium | 4.3 | 2026-07-02 | Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions. |
CVE-2026-27414 | High | 8.8 | 2026-07-02 | Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions. |
CVE-2026-23801 | High | 8.1 | 2026-03-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows P… |
CVE-2025-69322 | High | 8.1 | 2026-02-20 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes PeakShops peakshops allows… |
CVE-2025-69294 | High | 8.8 | 2026-02-20 | Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5… |
CVE-2025-69314 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows… |
CVE-2025-69100 | High | 8.1 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP L… |
CVE-2025-69099 | High | 8.8 | 2026-01-22 | Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5. |
CVE-2025-63017 | High | 7.5 | 2026-01-22 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin werkstatt-… |
CVE-2025-63003 | High | 7.5 | 2025-12-09 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North - Required Plugin nor… |
CVE-2025-62066 | High | 7.5 | 2025-11-06 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This… |