Skip to content
OpenAdvisories

Vendor

Edge-Themes

25 known vulnerabilities.

Products

Alloggio - Hotel Booking 2 Eldon 2 Edge CPT 2 Overworld 2 Aalto 2 Laurits 1 Pelicula 1 UrbanGo Membership 1 Belletrist 1 Haaken 1 Valeska 1 Shuffle 1 Reina 1 Behold 1 Alloggio Membership 1 Kamperen 1 Cinerama 1 Gracey 1 Archicon 1 Barista 1
All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

  • High 8.1
    CVE-2026-42777

    WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Aalto <= 1.8 versions.

    Edge-Themes Aalto
  • High 8.1
    CVE-2026-104747

    WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Haaken <= 1.5 versions.

    Edge-Themes Haaken
  • High 8.1
    CVE-2025-15637

    WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Shuffle <= 1.8 versions.

    Edge-Themes Shuffle
  • High 8.1
    CVE-2026-66653

    WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

    Edge-Themes Barista
  • High 7.5
    CVE-2026-57800

    WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.5.

    Edge-Themes Overworld
  • High 7.5
    CVE-2026-57788

    WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Aalto aalto allows PHP Local File Inclusion.This issue affects Aalto: from n/a through <= 1.8.

    Edge-Themes Aalto
  • High 8.1
    CVE-2026-40738

    WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Eldon <= 1.4.1 versions.

    Edge-Themes Eldon
  • High 8.1
    CVE-2026-40735

    WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Reina <= 2.1 versions.

    Edge-Themes Reina
  • High 8.1
    CVE-2026-40761

    WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Valeska <= 1.2.2 versions.

    Edge-Themes Valeska
  • High 8.1
    CVE-2026-40760

    WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Behold <= 1.5 versions.

    Edge-Themes Behold
  • High 8.1
    CVE-2026-40736

    WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Laurits <= 1.5.1 versions.

    Edge-Themes Laurits
  • High 8.1
    CVE-2026-39539

    WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.

    Edge-Themes Alloggio - Hotel Booking
  • High 8.1
    CVE-2025-69410

    WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Belletrist belletrist allows PHP Local File Inclusion.This issue affects Belletrist: from n/a through <= 1.2.

    Edge-Themes Belletrist
  • High 8.1
    CVE-2025-69057

    WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Eldon eldon allows PHP Local File Inclusion.This issue affects Eldon: from n/a through <= 1.0.

    Edge-Themes Eldon
  • High 8.1
    CVE-2025-69050

    WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Overworld overworld allows PHP Local File Inclusion.This issue affects Overworld: from n/a through <= 1.3.

    Edge-Themes Overworld
  • High 7.5
    CVE-2025-68987

    WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Cinerama cinerama allows PHP Local File Inclusion.This issue affects Cinerama: from n/a through <= 2.9.

    Edge-Themes Cinerama
  • High 8.1
    CVE-2025-64287

    WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Alloggio - Hotel Booking alloggio allows PHP Local File Inclusion.This issue affects Alloggio - Hotel Booking: from n/a throug…

    Edge-Themes Alloggio - Hotel Booking
  • High 8.1
    CVE-2025-62868

    WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through 1.4.

    Edge-Themes Edge CPT Browsers
  • High 8.1
    CVE-2025-49889

    WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Edge-Themes Edge CPT edge-cpt allows PHP Local File Inclusion.This issue affects Edge CPT: from n/a through <= 1.4.

    Edge-Themes Edge CPT Browsers