Fuelthemes

12 CVEs across 7 Fuelthemes products. Browse Fuelthemes vulnerabilities, severities, and proof-of-concept exploits.

Fuelthemes products with known CVEs

ProductCVEs
Werkstatt4
North2
Peakshops2
North - Required Plugin1
Revolution1
The Issue1
Werkstatt Plugin1
Fuelthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57690Medium4.32026-07-02Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.
CVE-2026-57689Medium4.32026-07-02Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.
CVE-2026-27414High8.82026-07-02Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.
CVE-2026-23801High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows P…
CVE-2025-69322High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes PeakShops peakshops allows…
CVE-2025-69294High8.82026-02-20Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5…
CVE-2025-69314High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows…
CVE-2025-69100High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP L…
CVE-2025-69099High8.82026-01-22Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5.
CVE-2025-63017High7.52026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin werkstatt-…
CVE-2025-63003High7.52025-12-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North - Required Plugin nor…
CVE-2025-62066High7.52025-11-06Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This…