Mikado-Themes

81 CVEs across 62 Mikado-Themes products. Browse Mikado-Themes vulnerabilities, severities, and proof-of-concept exploits.

Mikado-Themes products with known CVEs

ProductCVEs
Pawfriends - Pet Shop And Veterinary Wordpress Theme3
Wanderland3
Backpack Traveler2
Cocco2
Curly2
Dolcino2
Dør2
Fiorello2
Fivestar2
Fleur2
Holmes2
Innovio2
Justicia2
Luxedrive2
Mikado Core2
Overton2
Powerlift2
Rosebud2
Verdure2
Wilmër2
Amfissa1
Ashtanga1
Aviana1
Bard1
Belfort1
Biagiotti1
Biagiotti Core1
Biagiotti Membership1
Chapterone1
Château1
Cortex1
Curly Core1
Depot1
Deston1
Easymeals1
Emaurri1
Eona1
Esmée1
Evently1
Foton1
Foton Core1
Gotravel1
Grandprix1
Grill And Chow1
Halstein1
Healthfirst1
Hendon1
Kastell1
Lekker1
Malgré1
Mikado-Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66657High8.12026-08-13Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
CVE-2026-66656High8.12026-08-13Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.
CVE-2026-57792High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local…
CVE-2026-52707High8.12026-06-17Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
CVE-2026-40757High8.12026-06-17Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.
CVE-2026-40756High8.12026-06-17Unauthenticated PHP Object Injection in Zoya <= 1.4 versions.
CVE-2026-40733High8.12026-06-17Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.
CVE-2026-40759High8.12026-06-17Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.
CVE-2026-40755High8.12026-06-17Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.
CVE-2026-40753High8.12026-06-17Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.
CVE-2026-40751High8.12026-06-17Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.
CVE-2026-40739High8.12026-06-17Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.
CVE-2026-40731High8.12026-06-17Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.
CVE-2026-39537High8.12026-06-17Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.
CVE-2026-39538High7.52026-04-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core…
CVE-2026-32511Medium5.42026-03-25Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7.
CVE-2026-32508Medium5.42026-03-25Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.
CVE-2026-27081High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows P…
CVE-2026-27080High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP…
CVE-2026-27079High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows P…
CVE-2026-27078High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows P…
CVE-2026-27077High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice…
CVE-2026-27076High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allo…
CVE-2026-27075High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows P…
CVE-2026-27047High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core al…
CVE-2026-27342High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopFit - Fitness and Gym…
CVE-2026-27341High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopScorer - Sports WordP…
CVE-2026-22457High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wanderland wanderland al…
CVE-2026-22429High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows P…
CVE-2026-22427High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows…
CVE-2026-22414High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP L…
CVE-2026-22413High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP…
CVE-2026-22412High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Loc…
CVE-2026-22410High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows P…
CVE-2026-22408High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Justicia justicia allows…
CVE-2026-22405High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows P…
CVE-2026-22403High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows P…
CVE-2026-22399High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Holmes holmes allows PHP…
CVE-2026-22397High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP L…
CVE-2026-22395High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows…
CVE-2026-22394High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Evently evently allows P…
CVE-2026-22392High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cortex cortex allows PHP…
CVE-2026-22389High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cocco cocco allows PHP L…
CVE-2026-22387High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Aviana aviana allows PHP…
CVE-2026-22383High7.52026-02-20Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Exploiti…
CVE-2026-22381High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes PawFriends - Pet Shop an…
CVE-2026-22344High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes FiveStar fivestar allows…
CVE-2025-69408High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes HealthFirst healthfirst…
CVE-2026-24631Medium5.42026-01-23Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Rosebud rosebud allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2026-22458Medium4.32026-01-22Missing Authorization vulnerability in Mikado-Themes Wanderland wanderland allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2026-22430Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2026-22411Low3.82026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2026-22409Low3.82026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2026-22407Low3.82026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2026-22406Low3.82026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2026-22404Low3.82026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Innovio innovio allows Exploiting Incorrectly Configured Access Control Securit…
CVE-2026-22400Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Holmes holmes allows Exploiting Incorrectly Configured Access Control Security…
CVE-2026-22398Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fleur fleur allows Exploiting Incorrectly Configured Access Control Security Le…
CVE-2026-22396Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2026-22393Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows Exploiting Incorrectly Configured Access Control Security Le…
CVE-2026-22391Medium5.42026-01-22Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Cocco cocco allows Exploiting Incorrectly Configured Access Control Security Le…
CVE-2026-22382Medium5.42026-01-22Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Cross Site Request Forg…
CVE-2025-67940High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Powerlift powerlift allo…
CVE-2025-67938High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Biagiotti biagiotti allo…
CVE-2025-54003High8.12026-01-22Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Depot depot allows PHP L…
CVE-2025-67937High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP…
CVE-2025-67936High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP L…
CVE-2025-67935High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allo…
CVE-2025-67934High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring al…
CVE-2025-69034High8.12025-12-30Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP…
CVE-2025-69032Medium5.42025-12-30Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2025-69030Medium5.42025-12-30Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Acc…
CVE-2025-67515High8.82025-12-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP…
CVE-2025-66532Medium4.32025-12-09Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…
CVE-2025-39467High8.12025-11-06Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a throug…
CVE-2025-39466High8.12025-11-06Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local…
CVE-2025-64368Medium5.42025-10-31Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.
CVE-2025-49297High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from…
CVE-2025-49296High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <…
CVE-2025-49295High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a throug…
CVE-2025-39494High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP…
CVE-2025-39490High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpa…
CVE-2025-39458High8.12025-05-19Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP L…
CVE-2024-12287Critical9.82024-12-18The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not…