Skip to content
OpenAdvisories

Vendor

axiomthemes

109 known vulnerabilities.

axiomthemes at a glance

Last 12 months
103
Critical · all time
22
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 50 100 December 2025: 58 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 9 vulnerabilities March 2026: 11 vulnerabilities, 3 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 7 vulnerabilities Jun July 2026: 2 vulnerabilities, 1 critical August 2026: 4 vulnerabilities, 4 critical September 2026: 0 vulnerabilities Sep October 2026: 11 vulnerabilities, 10 critical November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 20261110
Sep 202600
Aug 202644
Jul 202621
Jun 202670
May 202600
Apr 202600
Mar 2026113
Feb 202690
Jan 202610
Dec 2025580
Nov 202510
Oct 202511
Sep 202511
Aug 202511
Jul 202500
Jun 202521
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

smart SEO 4 Reprizo 2 Rhodos 2 Kicker 2 Redy 2 777 2 Agricola 2 Welldone 1 SevenTrees 1 Hygia 1 Crafti 1 Confidant 1 Veto 1 FitLine 1 Manufactory 1 Amuli 1 Marveland 1 The Gig 1 Dwell 1 Palatio 1 Lione 1 Mounthood 1 Spin 1 Critique 1 FitFlex 1 Aromatica 1 Nirvana 1 Sweet Dessert 1 Spock 1 Pubzinne 1 Promo 1 Hallelujah 1 Fabric 1 Harper 1 Lunna 1 Pantry 1 Tripster 1 Smash 1 Stallion 1 Katelyn 1
All Critical High Medium Low Exploited only Public exploit

109 results · Feed

  • Critical 9.8
    CVE-2026-112854

    WordPress Holistic Center theme <= 1.2.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Holistic Center holistic-center allows Object Injection.This issue affects Holistic Center: from n/a through 1.2.6.

    axiomthemes Holistic Center
  • Critical 9.8
    CVE-2026-112853

    WordPress Hallelujah theme <= 1.1.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Hallelujah hallelujah allows Object Injection.This issue affects Hallelujah: from n/a through 1.1.1.

    axiomthemes Hallelujah
  • Critical 9.8
    CVE-2026-112858

    WordPress Rhodos theme <= 1.3.3 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Rhodos rhodos allows Object Injection.This issue affects Rhodos: from n/a through 1.3.3.

    axiomthemes Rhodos
  • Critical 9.8
    CVE-2026-112857

    WordPress Reprizo theme <= 1.0.8 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Reprizo reprizo allows Object Injection.This issue affects Reprizo: from n/a through 1.0.8.

    axiomthemes Reprizo
  • Critical 9.8
    CVE-2026-112855

    WordPress Redy theme <= 1.3.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Redy redy allows Object Injection.This issue affects Redy: from n/a through 1.3.5.

    axiomthemes Redy
  • Critical 9.8
    CVE-2026-66569

    WordPress Kicker theme <= 2.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Kicker <= 2.2.1 versions.

    axiomthemes Kicker
  • Critical 9.8
    CVE-2026-66568

    WordPress Original theme <= 1.9.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Original <= 1.9.0 versions.

    axiomthemes Original
  • Critical 9.8
    CVE-2026-66565

    WordPress FC United theme <= 1.1.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in FC United <= 1.1.1 versions.

    axiomthemes FC United
  • High 8.1
    CVE-2026-42704

    WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.

    axiomthemes Kids Care
  • Critical 9.8
    CVE-2026-93945

    WordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.

    axiomthemes Balance
  • Critical 9.8
    CVE-2026-93927

    WordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.

    axiomthemes Veto
  • Critical 9.8
    CVE-2026-65581

    WordPress AI ANN theme <= 1.29.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.

    axiomthemes AI ANN
  • Critical 9.8
    CVE-2026-65579

    WordPress Agricola theme <= 1.21.0 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.

    axiomthemes Agricola
  • Critical 9.8
    CVE-2026-65572

    WordPress A.Williams theme <= 1.3.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.

    axiomthemes A.Williams
  • Critical 9.8
    CVE-2026-65571

    WordPress 69 Clothing theme <= 1.2.11.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.

    axiomthemes 69 Clothing
  • Medium 6.7
    CVE-2026-27377

    WordPress QuickCal - Appointment Booking Calendar for WordPress plugin <= 1.0.16 - Broken Access Control vulnerability

    Booking Agent Broken Access Control in QuickCal - Appointment Booking Calendar for WordPress <= 1.0.16 versions.

    axiomthemes QuickCal - Appointment Booking Calendar for WordPress Web / CMS
  • Critical 9.8
    CVE-2026-57738

    WordPress 777 theme <= 1.13.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes 777 triple-seven allows Object Injection.This issue affects 777: from n/a through <= 1.13.0.

    axiomthemes 777
  • High 8.1
    CVE-2026-22326

    WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.

    axiomthemes Reprizo
  • High 8.1
    CVE-2026-22325

    WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.

    axiomthemes Promo
  • High 8.1
    CVE-2025-69369

    WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racquet: from n/a through 1.12.0.

    axiomthemes Racquet
  • High 8.1
    CVE-2025-58897

    WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. This issue affects Fermentio: from n/a through 1.5.0.

    axiomthemes Fermentio
  • High 8.1
    CVE-2025-58707

    WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This issue affects Spin: from n/a through 1.8.

    axiomthemes Spin
  • High 8.1
    CVE-2025-58705

    WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12.

    axiomthemes Crafti
  • High 8.1
    CVE-2025-53440

    WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Confidant: from n/a through 1.4.

    axiomthemes Confidant
  • Critical 9.8
    CVE-2026-22500

    WordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and Tools Store: from n/a through <= 1.1.2.

    axiomthemes m2 | Construction and Tools Store
  • High 8.1
    CVE-2026-28129

    WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.

    axiomthemes Little Birdies
  • High 8.1
    CVE-2026-28117

    WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.

    axiomthemes smart SEO
  • High 8.1
    CVE-2026-28119

    WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.

    axiomthemes Nirvana
  • High 8.1
    CVE-2026-28118

    WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4.

    axiomthemes Welldone
  • High 8.1
    CVE-2026-28079

    WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13.

    axiomthemes Conquerors
  • High 8.1
    CVE-2026-28024

    WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through <= 1.1.12.

    axiomthemes Helion
  • High 8.1
    CVE-2026-27326

    WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This…

    axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27098

    WordPress Au Pair Agency - Babysitting & Nanny Theme theme <= 1.2.2 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - Babysitting & Nanny Theme: from n/a through <= 1.2.2.

    axiomthemes Au Pair Agency - Babysitting & Nanny Theme
  • Critical 9.8
    CVE-2026-22501

    WordPress Mounthood theme <= 1.3.2 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Mounthood mounthood allows Object Injection.This issue affects Mounthood: from n/a through <= 1.3.2.

    axiomthemes Mounthood
  • Critical 9.8
    CVE-2026-22475

    WordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.

    axiomthemes Estate
  • High 8.1
    CVE-2026-22368

    WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through <= 1.0.2.

    axiomthemes Redy
  • High 8.1
    CVE-2026-22366

    WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This issue affects Jude: from n/a through <= 1.3.0.

    axiomthemes Jude
  • High 8.1
    CVE-2026-22370

    WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0.

    axiomthemes Marveland
  • High 8.1
    CVE-2026-22363

    WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.This issue affects Rhodos: from n/a through <= 1.3.3.

    axiomthemes Rhodos
  • High 8.1
    CVE-2026-22365

    WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.This issue affects Soleng: from n/a through <= 1.0.5.

    axiomthemes Soleng