Skip to content
OpenAdvisories

Vendor

fuelthemes

14 known vulnerabilities.

fuelthemes at a glance

Last 12 months
13
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 1 vulnerability Dec 2025 January 2026: 4 vulnerabilities February 2026: 2 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 3 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 2 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202620
Sep 202600
Aug 202600
Jul 202630
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202620
Jan 202640
Dec 202510
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Werkstatt 5 North 2 PeakShops 2 Revolution 1 The Issue 1 The Voux 1 North - Required Plugin 1 WerkStatt Plugin 1
All Critical High Medium Low Exploited only Public exploit

14 results · Feed

  • High 8.1
    CVE-2026-94067

    WordPress The Voux theme <= 6.9.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes The Voux thevoux-wp allows PHP Local File Inclusion.This issue affects The Voux: from n/a through 6.9.5.

    fuelthemes The Voux
  • High 8.1
    CVE-2026-94062

    WordPress Werkstatt theme <= 4.8.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through 4.8.3.

    fuelthemes Werkstatt
  • Medium 4.3
    CVE-2026-57690

    WordPress Werkstatt theme <= 4.7.2 - Cross Site Request Forgery (CSRF) vulnerability

    Unauthenticated Cross Site Request Forgery (CSRF) in Werkstatt <= 4.7.2 versions.

    fuelthemes Werkstatt
  • Medium 4.3
    CVE-2026-57689

    WordPress Werkstatt theme <= 4.7.2 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Werkstatt <= 4.7.2 versions.

    fuelthemes Werkstatt
  • High 8.8
    CVE-2026-27414

    WordPress Werkstatt theme <= 4.8.3 - PHP Object Injection vulnerability

    Contributor PHP Object Injection in Werkstatt <= 4.8.3 versions.

    fuelthemes Werkstatt
  • High 8.1
    CVE-2026-23801

    WordPress The Issue theme <= 1.6.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes The Issue theissue allows PHP Local File Inclusion.This issue affects The Issue: from n/a through <= 1.6.11.

    fuelthemes The Issue
  • High 8.1
    CVE-2025-69322

    WordPress PeakShops theme < 1.5.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes PeakShops peakshops allows PHP Local File Inclusion.This issue affects PeakShops: from n/a through < 1.5.9.

    fuelthemes PeakShops
  • High 8.8
    CVE-2025-69294

    WordPress PeakShops theme <= 1.5.9 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in fuelthemes PeakShops peakshops allows Object Injection.This issue affects PeakShops: from n/a through <= 1.5.9.

    fuelthemes PeakShops
  • High 8.1
    CVE-2025-69314

    WordPress Werkstatt theme < 4.8.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Werkstatt werkstatt allows PHP Local File Inclusion.This issue affects Werkstatt: from n/a through < 4.8.3.

    fuelthemes Werkstatt
  • High 8.1
    CVE-2025-69100

    WordPress North theme <= 5.7.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North north-wp allows PHP Local File Inclusion.This issue affects North: from n/a through <= 5.7.5.

    fuelthemes North
  • High 8.8
    CVE-2025-69099

    WordPress North theme <= 5.7.5 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in fuelthemes North north-wp allows Object Injection.This issue affects North: from n/a through <= 5.7.5.

    fuelthemes North
  • High 7.5
    CVE-2025-63017

    WordPress WerkStatt plugin plugin <= 1.6.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes WerkStatt Plugin werkstatt-plugin allows PHP Local File Inclusion.This issue affects WerkStatt Plugin: from n/a through <= 1.6.…

    fuelthemes WerkStatt Plugin
  • High 7.5
    CVE-2025-63003

    WordPress North - Required Plugin plugin <= 1.4.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes North - Required Plugin north-plugin allows PHP Local File Inclusion.This issue affects North - Required Plugin: from n/a throu…

    fuelthemes North - Required Plugin
  • High 7.5
    CVE-2025-62066

    WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in fuelthemes Revolution revolution.This issue affects Revolution: from n/a through < 2.5.8.

    fuelthemes Revolution