Select-Themes

31 CVEs across 24 Select-Themes products. Browse Select-Themes vulnerabilities, severities, and proof-of-concept exploits.

Select-Themes products with known CVEs

ProductCVEs
Stockholm4
Stockholm Core4
Prowess3
Struktur3
Don Peppe2
Select Core2
Setsail2
Stockholm Core2
Borgholm1
Dessau1
Getaway1
Hiroshi1
Manufaktur Solutions1
Micdrop1
Mildhill1
Mixtape1
Moments1
Santé1
Setsail Membership1
Struktur Core1
Tonda1
Tonda Core1
Waveride1
Zermatt1
Select-Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65477High7.52026-07-23Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.
CVE-2026-57805High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP L…
CVE-2026-57803High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP…
CVE-2026-57802High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Loca…
CVE-2026-57801High7.52026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows P…
CVE-2026-40752High8.12026-06-17Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.
CVE-2026-39560High8.12026-06-17Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions.
CVE-2026-39580High8.12026-06-17Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.
CVE-2026-39573High8.12026-06-17Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.
CVE-2026-39567High8.12026-06-17Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.
CVE-2026-39547High8.12026-06-17Unauthenticated Local File Inclusion in Getaway < 1.8 versions.
CVE-2026-39545High8.12026-06-17Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.
CVE-2026-39553High8.12026-06-02Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Loca…
CVE-2026-32502Critical9.82026-03-25Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm…
CVE-2026-25458High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Moments moments allows P…
CVE-2026-25457High8.12026-03-25Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Mixtape mixtape allows P…
CVE-2026-22449High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allow…
CVE-2026-22446High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows P…
CVE-2026-22423High8.12026-03-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows P…
CVE-2025-69407High8.12026-02-20Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows…
CVE-2026-24531High7.52026-01-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows P…
CVE-2026-22450Medium4.32026-01-22Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe…
CVE-2026-22447Medium5.32026-01-22Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-69029Medium5.42025-12-30Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2025-68077Medium6.52025-12-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This…
CVE-2025-68076Medium6.52025-12-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core stockholm-core allows Stored…
CVE-2025-68068High7.52025-12-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm stockholm allo…
CVE-2025-68067High7.52025-12-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm Core stockholm…
CVE-2025-67539Medium6.52025-12-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Select Core select-core allows DOM-Based XS…
CVE-2025-67521High7.52025-12-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Select Core select-core…
CVE-2025-39463High7.52025-11-06Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP…
CVE-2025-1564Critical9.82025-03-01The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a u…
CVE-2024-34554High8.52024-06-04Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.Th…
CVE-2024-34552High8.52024-06-04Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This is…
CVE-2024-34551Critical9.02024-06-04Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This is…
CVE-2024-34553High7.12024-05-08Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This is…