Skip to content
OpenAdvisories

Vendor

Case-Themes

5 known vulnerabilities.

Case-Themes at a glance

Last 12 months
2
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 0 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202610
Mar 202600
Feb 202610
Jan 202600
Dec 202500
Nov 202511
Oct 202500
Sep 202500
Aug 202511
Jul 202500
Jun 202510
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Case Theme User 2 CTUsers 1 Booked 1 Case Addons 1
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.5
    CVE-2025-5804

    WordPress Case Theme User < 1.0.4 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through < 1.0.4.

    Case-Themes Case Theme User
  • Medium 6.7
    CVE-2026-22341

    WordPress Booked plugin <= 3.0.0 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Case-Themes Booked booked allows Authentication Abuse.This issue affects Booked: from n/a through <= 3.0.0.

    Case-Themes Booked
  • Critical 9.9
    CVE-2025-62047

    WordPress Case Addons plugin < 1.3.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.

    Case-Themes Case Addons
  • Critical 9.8
    CVE-2025-5821

    Case Theme User <= 1.0.3 - Authentication Bypass via Social Login

    The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_ca…

    Case-Themes Case Theme User Web / CMS
  • High 7.5
    CVE-2025-32298

    WordPress CTUsers plugin <= 1.0.0 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case-Themes CTUsers ctuser allows PHP Local File Inclusion.This issue affects CTUsers: from n/a through <= 1.0.0.

    Case-Themes CTUsers