Mikado-Themes Mikado Core
3 CVEs affecting Mikado-Themes Mikado Core. Latest disclosed: 2026-06-17. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-39537 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions. |
CVE-2026-39538 | High | 7.5 | 2026-04-08 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core… |
CVE-2025-9058 | Medium | 6.4 | 2025-09-09 | The Mikado Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.5.2 due to insufficient in… |