Skip to content
OpenAdvisories

Vendor

Elated-Themes

58 known vulnerabilities.

Elated-Themes at a glance

Last 12 months
53
Critical · all time
7
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 2 vulnerabilities, 1 critical Dec 2025 January 2026: 8 vulnerabilities February 2026: 0 vulnerabilities March 2026: 17 vulnerabilities, 1 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 16 vulnerabilities Jun July 2026: 3 vulnerabilities August 2026: 3 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202620
Sep 202600
Aug 202630
Jul 202630
Jun 2026160
May 202600
Apr 202600
Mar 2026171
Feb 202600
Jan 202680
Dec 202521
Nov 202553
Oct 202511
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202511
Feb 202500
Jan 202500
Dec 202400

Products

Search & Go 3 Mane 2 Laurent 2 The Aisle 2 NeoBeat 2 Aperitif 2 Askka 2 Sweet Jane 2 Töbel 2 Roisin 2 Solene Core 1 Mr. SEO 1 Elated Listing 1 Léonie 1 Playroom 1 Lella 1 Audrey 1 Zentrum 1 Leroux 1 Helvig 1 Elated Membership 1 Amoli 1 FindAll 1 Etchy 1 Fidalgo 1 Academist Core 1 Neo Ocular 1 Academist Membership 1 Frappé 1 Laurent Core 1 Malmö 1 Savory 1 Konsept 1 Academist 1 FindAll Membership 1 Solene 1 Valiance 1 Flow 1 SingleMalt 1 Ambient 1
All Critical High Medium Low Exploited only Public exploit

58 results · Feed

  • High 8.1
    CVE-2026-112820

    WordPress Academist Core plugin <= 1.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Academist Core academist-core allows PHP Local File Inclusion.This issue affects Academist Core: from n/a through 1.4.1.

    Elated-Themes Academist Core
  • High 8.1
    CVE-2026-66566

    WordPress Ambient theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Ambient <= 1.7 versions.

    Elated-Themes Ambient
  • High 8.1
    CVE-2026-78478

    Måne <= 1.7 - Unauthenticated Local File Inclusion

    The Mane theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in …

    Elated-Themes Mane Web / CMS
  • High 8.1
    CVE-2026-66670

    WordPress Måne theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Måne <= 1.7 versions.

    Elated-Themes Mane
  • High 8.1
    CVE-2026-66671

    WordPress Verdure Core plugin <= 1.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Verdure Core <= 1.2 versions.

    Elated-Themes Verdure Core
  • High 7.5
    CVE-2026-65481

    WordPress Vino theme <= 1.9 - Local File Inclusion vulnerability

    Contributor Local File Inclusion in Vino <= 1.9 versions.

    Elated-Themes Vino
  • High 7.5
    CVE-2026-57793

    WordPress Flow theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Flow flow allows PHP Local File Inclusion.This issue affects Flow: from n/a through <= 1.8.

    Elated-Themes Flow
  • High 8.1
    CVE-2026-42382

    WordPress Audrey theme <= 1.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Audrey <= 1.5 versions.

    Elated-Themes Audrey
  • High 8.1
    CVE-2026-39576

    WordPress SingleMalt theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in SingleMalt <= 1.5 versions.

    Elated-Themes SingleMalt
  • High 8.1
    CVE-2026-39556

    WordPress Konsept theme <= 1.9 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Konsept <= 1.9 versions.

    Elated-Themes Konsept
  • High 8.1
    CVE-2026-39523

    WordPress Solene Core plugin <= 2.3.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Solene Core <= 2.3.2 versions.

    Elated-Themes Solene Core
  • High 8.1
    CVE-2026-39558

    WordPress Malmö theme <= 2.2 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Malmö <= 2.2 versions.

    Elated-Themes Malmö
  • High 8.1
    CVE-2026-40758

    WordPress Léonie theme <= 1.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Léonie <= 1.2.1 versions.

    Elated-Themes Léonie
  • High 8.1
    CVE-2026-40754

    WordPress Roisin theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Roisin <= 1.4 versions.

    Elated-Themes Roisin
  • High 8.1
    CVE-2026-39577

    WordPress Playroom theme <= 1.4.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Playroom <= 1.4.1 versions.

    Elated-Themes Playroom
  • High 8.1
    CVE-2026-39578

    WordPress Valiance theme <= 1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Valiance <= 1.2 versions.

    Elated-Themes Valiance
  • High 8.1
    CVE-2026-39568

    WordPress Mr. SEO theme <= 2.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mr. SEO <= 2.0 versions.

    Elated-Themes Mr. SEO
  • High 8.1
    CVE-2026-39557

    WordPress NeoBeat theme <= 1.7 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in NeoBeat <= 1.7 versions.

    Elated-Themes NeoBeat
  • High 8.1
    CVE-2026-39554

    WordPress Fidalgo theme <= 1.2.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Fidalgo <= 1.2.2 versions.

    Elated-Themes Fidalgo
  • High 8.1
    CVE-2026-39549

    WordPress Aperitif theme <= 1.5 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Aperitif <= 1.5 versions.

    Elated-Themes Aperitif
  • High 8.1
    CVE-2026-39522

    WordPress Solene theme <= 3.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Solene <= 3.4 versions.

    Elated-Themes Solene
  • High 8.1
    CVE-2026-39555

    WordPress Askka theme <= 1.3.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Elated-Themes Askka allows Object Injection. This issue affects Askka: from n/a through 1.3.1.

    Elated-Themes Askka
  • High 8.1
    CVE-2026-39551

    WordPress Töbel theme <= 1.8.1 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Elated-Themes Töbel allows Object Injection. This issue affects Töbel: from n/a through 1.8.1.

    Elated-Themes Töbel
  • High 8.1
    CVE-2026-39550

    WordPress Aperitif theme <= 1.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Elated-Themes Aperitif allows Object Injection. This issue affects Aperitif: from n/a through 1.6.

    Elated-Themes Aperitif
  • Medium 5.4
    CVE-2026-32507

    WordPress Leroux theme < 1.4 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4.

    Elated-Themes Leroux
  • High 8.1
    CVE-2026-27048

    WordPress The Aisle Core plugin <= 2.0.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes The Aisle Core theaisle-core allows PHP Local File Inclusion.This issue affects The Aisle Core: from n/a through <= 2.0.5.

    Elated-Themes The Aisle Core
  • Critical 9.8
    CVE-2026-24971

    WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8.

    Elated-Themes Search & Go
  • Medium 6.5
    CVE-2026-24972

    WordPress Elated Listing plugin <= 1.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Elated-Themes Elated Listing eltd-listing allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elated Listing: from n/a through <= 1.4.

    Elated-Themes Elated Listing
  • High 8.1
    CVE-2026-22512

    WordPress Roisin theme <= 1.2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Roisin roisin allows PHP Local File Inclusion.This issue affects Roisin: from n/a through <= 1.2.1.

    Elated-Themes Roisin
  • High 8.1
    CVE-2026-22509

    WordPress Gioia theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gioia gioia allows PHP Local File Inclusion.This issue affects Gioia: from n/a through <= 1.4.

    Elated-Themes Gioia
  • High 8.1
    CVE-2026-22511

    WordPress NeoBeat theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes NeoBeat neobeat allows PHP Local File Inclusion.This issue affects NeoBeat: from n/a through <= 1.2.

    Elated-Themes NeoBeat
  • High 8.1
    CVE-2026-22506

    WordPress Amoli theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Amoli amoli allows PHP Local File Inclusion.This issue affects Amoli: from n/a through <= 1.0.

    Elated-Themes Amoli
  • High 8.1
    CVE-2026-22499

    WordPress Lella theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local File Inclusion.This issue affects Lella: from n/a through <= 1.2.

    Elated-Themes Lella
  • High 8.1
    CVE-2026-22498

    WordPress Laurent theme <= 3.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local File Inclusion.This issue affects Laurent: from n/a through <= 3.1.

    Elated-Themes Laurent
  • High 8.1
    CVE-2026-22493

    WordPress Gaspard theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local File Inclusion.This issue affects Gaspard: from n/a through <= 1.3.

    Elated-Themes Gaspard
  • High 8.1
    CVE-2026-22476

    WordPress Etchy theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Etchy etchy allows PHP Local File Inclusion.This issue affects Etchy: from n/a through <= 1.0.

    Elated-Themes Etchy
  • High 8.1
    CVE-2026-22478

    WordPress FindAll theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes FindAll findall allows PHP Local File Inclusion.This issue affects FindAll: from n/a through <= 1.4.

    Elated-Themes FindAll
  • High 8.1
    CVE-2026-22456

    WordPress Askka theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Askka askka allows PHP Local File Inclusion.This issue affects Askka: from n/a through <= 1.0.

    Elated-Themes Askka
  • High 8.1
    CVE-2026-22441

    WordPress Zentrum theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Zentrum zentrum allows PHP Local File Inclusion.This issue affects Zentrum: from n/a through <= 1.0.

    Elated-Themes Zentrum
  • High 8.1
    CVE-2026-22436

    WordPress Helvig theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Helvig helvig allows PHP Local File Inclusion.This issue affects Helvig: from n/a through <= 1.0.

    Elated-Themes Helvig