Skip to content
OpenAdvisories

Vendor

Elated-Themes

58 known vulnerabilities.

Products

Search & Go 3 Mane 2 Laurent 2 The Aisle 2 NeoBeat 2 Aperitif 2 Askka 2 Sweet Jane 2 Töbel 2 Roisin 2 Solene Core 1 Mr. SEO 1 Elated Listing 1 Léonie 1 Playroom 1 Lella 1 Audrey 1 Zentrum 1 Leroux 1 Helvig 1 Elated Membership 1 Amoli 1 FindAll 1 Etchy 1 Fidalgo 1 Academist Core 1 Neo Ocular 1 Academist Membership 1 Frappé 1 Laurent Core 1 Malmö 1 Savory 1 Konsept 1 Academist 1 FindAll Membership 1 Solene 1 Valiance 1 Flow 1 SingleMalt 1 Ambient 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-24971

    WordPress Search & Go theme <= 2.8 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Elated-Themes Search & Go searchgo allows Privilege Escalation.This issue affects Search & Go: from n/a through <= 2.8.

    Elated-Themes Search & Go
  • Critical 9.8
    CVE-2025-13613

    Elated Membership <= 1.2 - Authentication Bypass via Social Login

    The Elated Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.2. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'eltdf_membership_chec…

    Elated-Themes Elated Membership Web / CMS
  • Critical 9.8
    CVE-2025-13539

    FindAll Membership <= 1.0.4 - Authentication Bypass via Social Login

    The FindAll Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.4. This is due to the plugin not properly logging in a user with the data that was previously verified through the 'findall_membership…

    Elated-Themes FindAll Membership Web / CMS
  • Critical 9.8
    CVE-2025-13538

    FindAll Listing <= 1.0.5 - Unauthenticated Privilege Escalation

    The FindAll Listing plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.5. This is due to the 'findall_listing_user_registration_additional_params' function not restricting what user roles a user can register w…

    Elated-Themes FindAll Listing Web / CMS
  • Critical 9.8
    CVE-2025-62064

    WordPress Search & Go theme <= 2.7 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Elated-Themes Search & Go search-and-go allows Password Recovery Exploitation.This issue affects Search & Go: from n/a through <= 2.7.

    Elated-Themes Search & Go
  • Critical 9.8
    CVE-2025-11522

    Search & Go - Directory WordPress Theme <= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover

    The Search & Go - Directory WordPress Theme theme for WordPress is vulnerable to Authentication Bypass via account takeover in all versions up to, and including, 2.7. This is due to insufficient user validation in the search_and_go_elated_check_facebook_user(…

    Elated-Themes Search & Go - Directory WordPress Theme Web / CMS
  • Critical 9.8
    CVE-2025-1671

    Academist Membership <= 1.1.6 - Authentication Bypass via Account Takeover

    The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authentic…

    Elated-Themes Academist Membership Web / CMS