Skip to content
OpenAdvisories

Vendor

Edge-Themes

25 known vulnerabilities.

Edge-Themes at a glance

Last 12 months
20
Critical · all time
3
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 1 vulnerability Dec 2025 January 2026: 2 vulnerabilities February 2026: 1 vulnerability March 2026: 4 vulnerabilities, 1 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 6 vulnerabilities Jun July 2026: 2 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202620
Sep 202600
Aug 202620
Jul 202620
Jun 202660
May 202600
Apr 202600
Mar 202641
Feb 202610
Jan 202620
Dec 202510
Nov 202510
Oct 202510
Sep 202500
Aug 202510
Jul 202500
Jun 202500
May 202500
Apr 202511
Mar 202511
Feb 202500
Jan 202500
Dec 202400

Products

Alloggio - Hotel Booking 2 Eldon 2 Edge CPT 2 Overworld 2 Aalto 2 Laurits 1 Pelicula 1 UrbanGo Membership 1 Belletrist 1 Haaken 1 Valeska 1 Shuffle 1 Reina 1 Behold 1 Alloggio Membership 1 Kamperen 1 Cinerama 1 Gracey 1 Archicon 1 Barista 1
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • High 8.1
    CVE-2026-42777

    WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

    Edge-Themes Aalto
  • High 8.1
    CVE-2026-104747

    WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

    Edge-Themes Haaken
  • High 8.1
    CVE-2025-15637

    WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions.

    Edge-Themes Shuffle
  • High 8.1
    CVE-2026-66653

    WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

    Edge-Themes Barista
  • High 7.5
    CVE-2026-57800

    WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5.

    Edge-Themes Overworld
  • High 7.5
    CVE-2026-57788

    WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.This issue affects Aalto: from n/a through <= 1.8.

    Edge-Themes Aalto
  • High 8.1
    CVE-2026-40738

    WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.

    Edge-Themes Eldon
  • High 8.1
    CVE-2026-40735

    WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

    Edge-Themes Reina
  • High 8.1
    CVE-2026-40761

    WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.

    Edge-Themes Valeska
  • High 8.1
    CVE-2026-40760

    WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Behold <= 1.5 versions.

    Edge-Themes Behold
  • High 8.1
    CVE-2026-40736

    WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

    Edge-Themes Laurits
  • High 8.1
    CVE-2026-39539

    WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

    Edge-Themes Alloggio - Hotel Booking
  • Critical 9.8
    CVE-2026-32512

    WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula: from n/a through < 1.10.

    Edge-Themes Pelicula
  • Medium 5.4
    CVE-2026-32509

    WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4.

    Edge-Themes Gracey
  • Medium 5.4
    CVE-2026-32510

    WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3.

    Edge-Themes Kamperen
  • Medium 5.4
    CVE-2026-32506

    WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7.

    Edge-Themes Archicon
  • High 8.1
    CVE-2025-69410

    WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2.

    Edge-Themes Belletrist
  • High 8.1
    CVE-2025-69057

    WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through <= 1.0.

    Edge-Themes Eldon
  • High 8.1
    CVE-2025-69050

    WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.3.

    Edge-Themes Overworld
  • High 7.5
    CVE-2025-68987

    WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows PHP Local File Inclusion.This issue affects Cinerama: from n/a through <= 2.9.

    Edge-Themes Cinerama
  • High 8.1
    CVE-2025-64287

    WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a throug…

    Edge-Themes Alloggio - Hotel Booking
  • High 8.1
    CVE-2025-62868

    WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4.

    Edge-Themes Edge CPT Browsers
  • High 8.1
    CVE-2025-49889

    WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cpt allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through <= 1.4.

    Edge-Themes Edge CPT Browsers
  • Critical 9.8
    CVE-2025-3278

    UrbanGo Membership <= 1.0.4 - Unauthenticated Privilege Escalation

    The UrbanGo Membership plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.0.4. This is due to the plugin allowing users who are registering new accounts to set their own role or by supplying 'user_register_role' fie…

    Edge-Themes UrbanGo Membership Web / CMS
  • Critical 9.8
    CVE-2025-1638

    Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover

    The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login a…

    Edge-Themes Alloggio Membership Web / CMS