Skip to content
OpenAdvisories

Vendor

axiomthemes

109 known vulnerabilities.

Products

smart SEO 4 Reprizo 2 Rhodos 2 Kicker 2 Redy 2 777 2 Agricola 2 Welldone 1 SevenTrees 1 Hygia 1 Crafti 1 Confidant 1 Veto 1 FitLine 1 Manufactory 1 Amuli 1 Marveland 1 The Gig 1 Dwell 1 Palatio 1 Lione 1 Mounthood 1 Spin 1 Critique 1 FitFlex 1 Aromatica 1 Nirvana 1 Sweet Dessert 1 Spock 1 Pubzinne 1 Promo 1 Hallelujah 1 Fabric 1 Harper 1 Lunna 1 Pantry 1 Tripster 1 Smash 1 Stallion 1 Katelyn 1
All Critical High Medium Low Exploited only Public exploit

86 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42704

    WordPress Kids Care theme <= 3.2.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kids Care <= 3.2.4 versions.

    axiomthemes Kids Care
  • High 8.1
    CVE-2026-22326

    WordPress Reprizo theme <= 1.0.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Reprizo <= 1.0.8 versions.

    axiomthemes Reprizo
  • High 8.1
    CVE-2026-22325

    WordPress Promo theme <= 1.3.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Promo <= 1.3.0 versions.

    axiomthemes Promo
  • High 8.1
    CVE-2025-69369

    WordPress Racquet theme <= 1.12.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Racquet allows PHP Local File Inclusion. This issue affects Racquet: from n/a through 1.12.0.

    axiomthemes Racquet
  • High 8.1
    CVE-2025-58897

    WordPress Fermentio theme <= 1.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Fermentio allows PHP Local File Inclusion. This issue affects Fermentio: from n/a through 1.5.0.

    axiomthemes Fermentio
  • High 8.1
    CVE-2025-58707

    WordPress Spin theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Spin allows PHP Local File Inclusion. This issue affects Spin: from n/a through 1.8.

    axiomthemes Spin
  • High 8.1
    CVE-2025-58705

    WordPress Crafti theme <= 1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Crafti allows PHP Local File Inclusion. This issue affects Crafti: from n/a through 1.12.

    axiomthemes Crafti
  • High 8.1
    CVE-2025-53440

    WordPress Confidant theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Axiomthemes Confidant allows PHP Local File Inclusion. This issue affects Confidant: from n/a through 1.4.

    axiomthemes Confidant
  • High 8.1
    CVE-2026-28129

    WordPress Little Birdies theme <= 1.3.16 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allows PHP Local File Inclusion.This issue affects Little Birdies: from n/a through <= 1.3.16.

    axiomthemes Little Birdies
  • High 8.1
    CVE-2026-28117

    WordPress smart SEO theme <= 2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.9.

    axiomthemes smart SEO
  • High 8.1
    CVE-2026-28119

    WordPress Nirvana theme <= 2.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Nirvana nir-vana allows PHP Local File Inclusion.This issue affects Nirvana: from n/a through <= 2.6.

    axiomthemes Nirvana
  • High 8.1
    CVE-2026-28118

    WordPress Welldone theme <= 2.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Welldone welldone allows PHP Local File Inclusion.This issue affects Welldone: from n/a through <= 2.4.

    axiomthemes Welldone
  • High 8.1
    CVE-2026-28079

    WordPress Conquerors theme <= 1.2.13 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Conquerors conquerors allows PHP Local File Inclusion.This issue affects Conquerors: from n/a through <= 1.2.13.

    axiomthemes Conquerors
  • High 8.1
    CVE-2026-28024

    WordPress Helion theme <= 1.1.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Helion helion allows PHP Local File Inclusion.This issue affects Helion: from n/a through <= 1.1.12.

    axiomthemes Helion
  • High 8.1
    CVE-2026-27326

    WordPress AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme theme <= 1.2.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme window-ac-services allows PHP Local File Inclusion.This…

    axiomthemes AC Services | HVAC, Air Conditioning & Heating Company WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27098

    WordPress Au Pair Agency - Babysitting & Nanny Theme theme <= 1.2.2 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in axiomthemes Au Pair Agency - Babysitting & Nanny Theme au-pair-agency allows Object Injection.This issue affects Au Pair Agency - Babysitting & Nanny Theme: from n/a through <= 1.2.2.

    axiomthemes Au Pair Agency - Babysitting & Nanny Theme
  • High 8.1
    CVE-2026-22368

    WordPress Redy theme <= 1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Redy redy allows PHP Local File Inclusion.This issue affects Redy: from n/a through <= 1.0.2.

    axiomthemes Redy
  • High 8.1
    CVE-2026-22366

    WordPress Jude theme <= 1.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Jude jude allows PHP Local File Inclusion.This issue affects Jude: from n/a through <= 1.3.0.

    axiomthemes Jude
  • High 8.1
    CVE-2026-22370

    WordPress Marveland theme <= 1.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Marveland marveland allows PHP Local File Inclusion.This issue affects Marveland: from n/a through <= 1.3.0.

    axiomthemes Marveland
  • High 8.1
    CVE-2026-22363

    WordPress Rhodos theme <= 1.3.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rhodos rhodos allows PHP Local File Inclusion.This issue affects Rhodos: from n/a through <= 1.3.3.

    axiomthemes Rhodos
  • High 8.1
    CVE-2026-22365

    WordPress Soleng theme <= 1.0.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleng soleng allows PHP Local File Inclusion.This issue affects Soleng: from n/a through <= 1.0.5.

    axiomthemes Soleng
  • High 8.1
    CVE-2026-22362

    WordPress Photolia theme <= 1.0.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Photolia photolia allows PHP Local File Inclusion.This issue affects Photolia: from n/a through <= 1.0.3.

    axiomthemes Photolia
  • High 8.1
    CVE-2026-22364

    WordPress SevenTrees theme <=1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes SevenTrees seventrees allows PHP Local File Inclusion.This issue affects SevenTrees: from n/a through <=1.0.2.

    axiomthemes SevenTrees
  • High 8.1
    CVE-2026-22361

    WordPress A-Mart theme <= 1.0.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes A-Mart a-mart allows PHP Local File Inclusion.This issue affects A-Mart: from n/a through <= 1.0.2.

    axiomthemes A-Mart
  • High 8.1
    CVE-2025-69409

    WordPress PJ | Life & Business Coaching theme <= 3.0.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes PJ | Life & Business Coaching pj allows PHP Local File Inclusion.This issue affects PJ | Life & Business Coaching: from n/a th…

    axiomthemes PJ | Life & Business Coaching
  • High 8.1
    CVE-2025-50003

    WordPress Amuli theme <= 2.3.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Amuli amuli allows PHP Local File Inclusion.This issue affects Amuli: from n/a through <= 2.3.0.

    axiomthemes Amuli
  • High 8.1
    CVE-2025-60067

    WordPress Giardino theme <= 1.1.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Giardino giardino allows PHP Local File Inclusion.This issue affects Giardino: from n/a through <= 1.1.10.

    axiomthemes Giardino
  • High 8.1
    CVE-2025-60063

    WordPress Rosalinda theme <= 1.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rosalinda rosalinda allows PHP Local File Inclusion.This issue affects Rosalinda: from n/a through <= 1.2.3.

    axiomthemes Rosalinda
  • High 8.1
    CVE-2025-60065

    WordPress Pinevale theme <= 1.0.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pinevale pinevale allows PHP Local File Inclusion.This issue affects Pinevale: from n/a through <= 1.0.14.

    axiomthemes Pinevale
  • High 8.1
    CVE-2025-60064

    WordPress Renewal theme <= 1.2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Renewal renewal allows PHP Local File Inclusion.This issue affects Renewal: from n/a through <= 1.2.2.

    axiomthemes Renewal
  • High 8.1
    CVE-2025-60066

    WordPress Katelyn theme <= 1.0.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Katelyn katelyn allows PHP Local File Inclusion.This issue affects Katelyn: from n/a through <= 1.0.10.

    axiomthemes Katelyn
  • High 8.1
    CVE-2025-60059

    WordPress smart SEO theme <= 2.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.12.

    axiomthemes smart SEO
  • High 8.1
    CVE-2025-60061

    WordPress Kicker theme <= 2.2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Kicker kicker allows PHP Local File Inclusion.This issue affects Kicker: from n/a through <= 2.2.0.

    axiomthemes Kicker
  • High 8.1
    CVE-2025-60060

    WordPress Pubzinne theme <= 1.0.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pubzinne pubzinne allows PHP Local File Inclusion.This issue affects Pubzinne: from n/a through <= 1.0.12.

    axiomthemes Pubzinne
  • High 8.1
    CVE-2025-60047

    WordPress IPharm theme <= 1.2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes IPharm ipharm allows PHP Local File Inclusion.This issue affects IPharm: from n/a through <= 1.2.3.

    axiomthemes IPharm
  • High 8.1
    CVE-2025-60049

    WordPress Soleil theme <= 1.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through <= 1.17.

    axiomthemes Soleil
  • High 8.1
    CVE-2025-60050

    WordPress Panda theme <= 1.21 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Panda panda allows PHP Local File Inclusion.This issue affects Panda: from n/a through <= 1.21.

    axiomthemes Panda
  • High 8.1
    CVE-2025-60048

    WordPress Tripster theme <= 1.0.10 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Tripster tripster allows PHP Local File Inclusion.This issue affects Tripster: from n/a through <= 1.0.10.

    axiomthemes Tripster
  • High 8.1
    CVE-2025-60046

    WordPress HeartStar theme <= 1.0.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes HeartStar heartstar allows PHP Local File Inclusion.This issue affects HeartStar: from n/a through <= 1.0.14.

    axiomthemes HeartStar
  • High 8.1
    CVE-2025-58949

    WordPress Spock theme <= 1.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Spock spock allows PHP Local File Inclusion.This issue affects Spock: from n/a through <= 1.17.

    axiomthemes Spock