Skip to content
OpenAdvisories

Vendor

BZOTheme

9 known vulnerabilities.

Products

Mella 1 Monki 1 Zenny 1 GiftXtore 1 PrintXtore 1 Petito 1 Zagg - Electronics & Accessories WooCommerce WordPress Theme 1 CraftXtore 1 Fitrush 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.1
    CVE-2025-67616

    WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Mella mella allows PHP Local File Inclusion.This issue affects Mella: from n/a through <= 1.2.29.

    BZOTheme Mella
  • High 8.1
    CVE-2025-53436

    WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Monki monki allows PHP Local File Inclusion.This issue affects Monki: from n/a through <= 2.0.5.

    BZOTheme Monki
  • High 8.1
    CVE-2025-24769

    WordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Zenny bw-zenny allows PHP Local File Inclusion.This issue affects Zenny: from n/a through <= 1.7.5.

    BZOTheme Zenny
  • High 8.1
    CVE-2025-28946

    WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme PrintXtore bw-printxtore allows PHP Local File Inclusion.This issue affects PrintXtore: from n/a through < 1.7.8.

    BZOTheme PrintXtore
  • High 8.1
    CVE-2025-4200

    Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion

    The Zagg - Electronics & Accessories WooCommerce WordPress Theme theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.1 via the load_view() function that is called via at least three AJAX actions: 'load_more_post…

    BZOTheme Zagg - Electronics & Accessories WooCommerce WordPress Theme Web / CMS
  • High 8.1
    CVE-2023-26005

    WordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Fitrush allows PHP Local File Inclusion. This issue affects Fitrush: from n/a through 1.3.4.

    BZOTheme Fitrush
  • High 8.1
    CVE-2025-24770

    WordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme CraftXtore bw-craftxtore allows PHP Local File Inclusion.This issue affects CraftXtore: from n/a through <= 1.7.

    BZOTheme CraftXtore
  • High 8.1
    CVE-2025-27362

    WordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme Petito bw-petito allows PHP Local File Inclusion.This issue affects Petito: from n/a through < 1.6.6.

    BZOTheme Petito
  • High 8.1
    CVE-2025-28888

    WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in BZOTheme GiftXtore bw-giftxtore allows PHP Local File Inclusion.This issue affects GiftXtore: from n/a through < 1.7.7.

    BZOTheme GiftXtore