Skip to content
OpenAdvisories

Vendor

Mikado-Themes

88 known vulnerabilities.

Mikado-Themes at a glance

Last 12 months
75
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 25 50 December 2025: 5 vulnerabilities Dec 2025 January 2026: 21 vulnerabilities February 2026: 4 vulnerabilities March 2026: 29 vulnerabilities Mar April 2026: 1 vulnerability May 2026: 0 vulnerabilities June 2026: 11 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202610
Sep 202600
Aug 202620
Jul 202610
Jun 2026110
May 202600
Apr 202610
Mar 2026290
Feb 202640
Jan 2026210
Dec 202550
Nov 202520
Oct 202510
Sep 202530
Aug 202500
Jul 202500
Jun 202530
May 202530
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202411

Products

Wanderland 3 PawFriends - Pet Shop and Veterinary WordPress Theme 3 Mikado Core 3 Cocco 2 Overton 2 Biagiotti Core 2 Verdure 2 Wilmër 2 Innovio 2 Fleur 2 Justicia 2 Holmes 2 FiveStar 2 Powerlift 2 Curly 2 Fiorello 2 LuxeDrive 2 Backpack Traveler 2 Rosebud 2 Dør 2 Dolcino 2 ChapterOne 1 MediClinic 1 TouchUp 1 Château 1 Stål 1 Kastell 1 GoTravel 1 Foton Core 1 TechLink 1 MultiOffice 1 Optimize 1 EasyMeals 1 Biagiotti 1 Eona 1 Belfort 1 Emaurri 1 Esmée 1 Wellspring 1 Curly Core 1
All Critical High Medium Low Exploited only Public exploit

88 results · Feed

  • High 8.1
    CVE-2026-62020

    WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

    Mikado-Themes TouchUp
  • High 8.1
    CVE-2026-66656

    WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

    Mikado-Themes Foton Core
  • High 8.1
    CVE-2026-66657

    WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.

    Mikado-Themes Biagiotti Core
  • High 7.5
    CVE-2026-57792

    WordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.1.

    Mikado-Themes Dør
  • High 8.1
    CVE-2026-52707

    WordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.

    Mikado-Themes Kastell
  • High 8.1
    CVE-2026-40757

    WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.

    Mikado-Themes Château
  • High 8.1
    CVE-2026-40756

    WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Zoya <= 1.4 versions.

    Mikado-Themes Zoya
  • High 8.1
    CVE-2026-40733

    WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.

    Mikado-Themes ShiftUp
  • High 8.1
    CVE-2026-40753

    WordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.

    Mikado-Themes EasyMeals
  • High 8.1
    CVE-2026-40731

    WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.

    Mikado-Themes ChapterOne
  • High 8.1
    CVE-2026-39537

    WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.

    Mikado-Themes Mikado Core
  • High 8.1
    CVE-2026-40759

    WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

    Mikado-Themes Esmée
  • High 8.1
    CVE-2026-40755

    WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.

    Mikado-Themes TechLink
  • High 8.1
    CVE-2026-40751

    WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.

    Mikado-Themes Ashtanga
  • High 8.1
    CVE-2026-40739

    WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

    Mikado-Themes LuxeDrive
  • High 7.5
    CVE-2026-39538

    WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File Inclusion.This issue affects Mikado Core: from n/a through <= 1.6.

    Mikado-Themes Mikado Core
  • Medium 5.4
    CVE-2026-32511

    WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7.

    Mikado-Themes Stål
  • Medium 5.4
    CVE-2026-32508

    WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability

    Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.

    Mikado-Themes Halstein
  • High 8.1
    CVE-2026-27079

    WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusion.This issue affects Amfissa: from n/a through <= 1.1.

    Mikado-Themes Amfissa
  • High 8.1
    CVE-2026-27078

    WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows PHP Local File Inclusion.This issue affects Emaurri: from n/a through <= 1.0.1.

    Mikado-Themes Emaurri
  • High 8.1
    CVE-2026-27081

    WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusion.This issue affects Rosebud: from n/a through <= 1.4.

    Mikado-Themes Rosebud
  • High 8.1
    CVE-2026-27080

    WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion.This issue affects Deston: from n/a through <= 1.0.

    Mikado-Themes Deston
  • High 8.1
    CVE-2026-27075

    WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows PHP Local File Inclusion.This issue affects Belfort: from n/a through <= 1.0.

    Mikado-Themes Belfort
  • High 8.1
    CVE-2026-27077

    WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice allows PHP Local File Inclusion.This issue affects MultiOffice: from n/a through <= 1.2.

    Mikado-Themes MultiOffice
  • High 8.1
    CVE-2026-27076

    WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through <= 1.0.

    Mikado-Themes LuxeDrive
  • High 8.1
    CVE-2026-27047

    WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core allows PHP Local File Inclusion.This issue affects Curly Core: from n/a through <= 2.1.6.

    Mikado-Themes Curly Core
  • High 8.1
    CVE-2026-27341

    WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopScorer - Sports WordPress Theme topscorer allows PHP Local File Inclusion.This issue affects TopScorer - Sports WordPress…

    Mikado-Themes TopScorer - Sports WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27342

    WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopFit - Fitness and Gym WordPress Theme topfit allows PHP Local File Inclusion.This issue affects TopFit - Fitness and Gym …

    Mikado-Themes TopFit - Fitness and Gym WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-22457

    WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.5.

    Mikado-Themes Wanderland
  • High 8.1
    CVE-2026-22429

    WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows PHP Local File Inclusion.This issue affects Verdure: from n/a through <= 1.6.

    Mikado-Themes Verdure
  • High 8.1
    CVE-2026-22427

    WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows PHP Local File Inclusion.This issue affects GoTravel: from n/a through <= 2.1.

    Mikado-Themes GoTravel
  • High 8.1
    CVE-2026-22410

    WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows PHP Local File Inclusion.This issue affects Dolcino: from n/a through <= 1.6.

    Mikado-Themes Dolcino
  • High 8.1
    CVE-2026-22414

    WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.This issue affects Marra: from n/a through <= 1.2.

    Mikado-Themes Marra
  • High 8.1
    CVE-2026-22412

    WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3.

    Mikado-Themes Eona
  • High 8.1
    CVE-2026-22413

    WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion.This issue affects Malgré: from n/a through <= 1.0.3.

    Mikado-Themes Malgré
  • High 8.1
    CVE-2026-22403

    WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through <= 1.9.

    Mikado-Themes Innovio
  • High 8.1
    CVE-2026-22405

    WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through <= 1.3.

    Mikado-Themes Overton
  • High 8.1
    CVE-2026-22408

    WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Justicia justicia allows PHP Local File Inclusion.This issue affects Justicia: from n/a through <= 1.2.

    Mikado-Themes Justicia
  • High 8.1
    CVE-2026-22395

    WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through <= 1.0.

    Mikado-Themes Fiorello
  • High 8.1
    CVE-2026-22397

    WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through <= 2.2.1.

    Mikado-Themes Fleur