Skip to content
OpenAdvisories

Vendor

Mikado-Themes

88 known vulnerabilities.

Products

Wanderland 3 PawFriends - Pet Shop and Veterinary WordPress Theme 3 Mikado Core 3 Cocco 2 Overton 2 Biagiotti Core 2 Verdure 2 Wilmër 2 Innovio 2 Fleur 2 Justicia 2 Holmes 2 FiveStar 2 Powerlift 2 Curly 2 Fiorello 2 LuxeDrive 2 Backpack Traveler 2 Rosebud 2 Dør 2 Dolcino 2 ChapterOne 1 MediClinic 1 TouchUp 1 Château 1 Stål 1 Kastell 1 GoTravel 1 Foton Core 1 TechLink 1 MultiOffice 1 Optimize 1 EasyMeals 1 Biagiotti 1 Eona 1 Belfort 1 Emaurri 1 Esmée 1 Wellspring 1 Curly Core 1
All Critical High Medium Low Exploited only Public exploit

64 results · Clear filters · Feed

  • High 8.1
    CVE-2026-62020

    WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in TouchUp < 1.4 versions.

    Mikado-Themes TouchUp
  • High 8.1
    CVE-2026-66656

    WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

    Mikado-Themes Foton Core
  • High 8.1
    CVE-2026-66657

    WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.

    Mikado-Themes Biagiotti Core
  • High 7.5
    CVE-2026-57792

    WordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.1.

    Mikado-Themes Dør
  • High 8.1
    CVE-2026-52707

    WordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.

    Mikado-Themes Kastell
  • High 8.1
    CVE-2026-40757

    WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.

    Mikado-Themes Château
  • High 8.1
    CVE-2026-40756

    WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Zoya <= 1.4 versions.

    Mikado-Themes Zoya
  • High 8.1
    CVE-2026-40733

    WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in ShiftUp <= 1.3 versions.

    Mikado-Themes ShiftUp
  • High 8.1
    CVE-2026-40753

    WordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in EasyMeals <= 1.5.1 versions.

    Mikado-Themes EasyMeals
  • High 8.1
    CVE-2026-40731

    WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in ChapterOne <= 1.7 versions.

    Mikado-Themes ChapterOne
  • High 8.1
    CVE-2026-39537

    WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Mikado Core <= 1.6 versions.

    Mikado-Themes Mikado Core
  • High 8.1
    CVE-2026-40759

    WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Esmée <= 1.4 versions.

    Mikado-Themes Esmée
  • High 8.1
    CVE-2026-40755

    WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in TechLink <= 1.3 versions.

    Mikado-Themes TechLink
  • High 8.1
    CVE-2026-40751

    WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Ashtanga <= 1.2 versions.

    Mikado-Themes Ashtanga
  • High 8.1
    CVE-2026-40739

    WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in LuxeDrive <= 1.4 versions.

    Mikado-Themes LuxeDrive
  • High 7.5
    CVE-2026-39538

    WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File Inclusion.This issue affects Mikado Core: from n/a through <= 1.6.

    Mikado-Themes Mikado Core
  • High 8.1
    CVE-2026-27079

    WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Amfissa amfissa allows PHP Local File Inclusion.This issue affects Amfissa: from n/a through <= 1.1.

    Mikado-Themes Amfissa
  • High 8.1
    CVE-2026-27078

    WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Emaurri emaurri allows PHP Local File Inclusion.This issue affects Emaurri: from n/a through <= 1.0.1.

    Mikado-Themes Emaurri
  • High 8.1
    CVE-2026-27081

    WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Rosebud rosebud allows PHP Local File Inclusion.This issue affects Rosebud: from n/a through <= 1.4.

    Mikado-Themes Rosebud
  • High 8.1
    CVE-2026-27080

    WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Deston deston allows PHP Local File Inclusion.This issue affects Deston: from n/a through <= 1.0.

    Mikado-Themes Deston
  • High 8.1
    CVE-2026-27075

    WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Belfort belfort allows PHP Local File Inclusion.This issue affects Belfort: from n/a through <= 1.0.

    Mikado-Themes Belfort
  • High 8.1
    CVE-2026-27077

    WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes MultiOffice multioffice allows PHP Local File Inclusion.This issue affects MultiOffice: from n/a through <= 1.2.

    Mikado-Themes MultiOffice
  • High 8.1
    CVE-2026-27076

    WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes LuxeDrive luxedrive allows PHP Local File Inclusion.This issue affects LuxeDrive: from n/a through <= 1.0.

    Mikado-Themes LuxeDrive
  • High 8.1
    CVE-2026-27047

    WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly Core curly-core allows PHP Local File Inclusion.This issue affects Curly Core: from n/a through <= 2.1.6.

    Mikado-Themes Curly Core
  • High 8.1
    CVE-2026-27341

    WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopScorer - Sports WordPress Theme topscorer allows PHP Local File Inclusion.This issue affects TopScorer - Sports WordPress…

    Mikado-Themes TopScorer - Sports WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-27342

    WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes TopFit - Fitness and Gym WordPress Theme topfit allows PHP Local File Inclusion.This issue affects TopFit - Fitness and Gym …

    Mikado-Themes TopFit - Fitness and Gym WordPress Theme Web / CMS
  • High 8.1
    CVE-2026-22457

    WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.5.

    Mikado-Themes Wanderland
  • High 8.1
    CVE-2026-22429

    WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows PHP Local File Inclusion.This issue affects Verdure: from n/a through <= 1.6.

    Mikado-Themes Verdure
  • High 8.1
    CVE-2026-22427

    WordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows PHP Local File Inclusion.This issue affects GoTravel: from n/a through <= 2.1.

    Mikado-Themes GoTravel
  • High 8.1
    CVE-2026-22410

    WordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows PHP Local File Inclusion.This issue affects Dolcino: from n/a through <= 1.6.

    Mikado-Themes Dolcino
  • High 8.1
    CVE-2026-22414

    WordPress Marra theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.This issue affects Marra: from n/a through <= 1.2.

    Mikado-Themes Marra
  • High 8.1
    CVE-2026-22412

    WordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3.

    Mikado-Themes Eona
  • High 8.1
    CVE-2026-22413

    WordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion.This issue affects Malgré: from n/a through <= 1.0.3.

    Mikado-Themes Malgré
  • High 8.1
    CVE-2026-22403

    WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through <= 1.9.

    Mikado-Themes Innovio
  • High 8.1
    CVE-2026-22405

    WordPress Overton theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through <= 1.3.

    Mikado-Themes Overton
  • High 8.1
    CVE-2026-22408

    WordPress Justicia theme <= 1.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Justicia justicia allows PHP Local File Inclusion.This issue affects Justicia: from n/a through <= 1.2.

    Mikado-Themes Justicia
  • High 8.1
    CVE-2026-22395

    WordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through <= 1.0.

    Mikado-Themes Fiorello
  • High 8.1
    CVE-2026-22397

    WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through <= 2.2.1.

    Mikado-Themes Fleur
  • High 8.1
    CVE-2026-22399

    WordPress Holmes theme <= 1.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Holmes holmes allows PHP Local File Inclusion.This issue affects Holmes: from n/a through <= 1.7.

    Mikado-Themes Holmes
  • High 8.1
    CVE-2026-22389

    WordPress Cocco theme <= 2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cocco cocco allows PHP Local File Inclusion.This issue affects Cocco: from n/a through <= 2.0.

    Mikado-Themes Cocco