Skip to content
OpenAdvisories

Vendor

Select-Themes

39 known vulnerabilities.

Products

Stockholm 4 Stockholm Core 4 Struktur 3 Prowess 3 Tonda 2 Select Core 2 Don Peppe 2 SetSail 2 Tonda Core 2 Moments 1 WaveRide 1 Hiroshi 1 Mixtape 1 Getaway 1 Dessau 1 Mildhill 1 Struktur Core 1 Zermatt 1 Santé 1 SetSail Membership 1 Borgholm 1 Micdrop 1 Manufaktur Solutions 1 Tonda Membership 1
All Critical High Medium Low Exploited only Public exploit

29 results · Clear filters · Feed

  • High 8.1
    CVE-2026-28152

    WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Tonda Core < 2.6 versions.

    Select-Themes Tonda Core
  • High 8.1
    CVE-2026-28151

    WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Tonda < 2.6 versions.

    Select-Themes Tonda
  • High 7.5
    CVE-2026-65477

    WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability

    Contributor Local File Inclusion in Tonda Core <= 2.1.2 versions.

    Select-Themes Tonda Core
  • High 7.5
    CVE-2026-57801

    WordPress SetSail theme <= 2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through <= 2.1.

    Select-Themes SetSail
  • High 7.5
    CVE-2026-57802

    WordPress Struktur theme < 2.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Inclusion. This issue affects Struktur: from n/a before 2.7.

    Select-Themes Struktur
  • High 7.5
    CVE-2026-57803

    WordPress Struktur Core plugin < 2.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP Local File Inclusion. This issue affects Struktur Core: from n/a before 2.7.

    Select-Themes Struktur Core
  • High 7.5
    CVE-2026-57805

    WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Tonda tonda allows PHP Local File Inclusion.This issue affects Tonda: from n/a through <= 2.5.

    Select-Themes Tonda
  • High 8.1
    CVE-2026-40752

    WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Manufaktur Solutions <= 1.1.1 versions.

    Select-Themes Manufaktur Solutions
  • High 8.1
    CVE-2026-39560

    WordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions.

    Select-Themes Hiroshi
  • High 8.1
    CVE-2026-39573

    WordPress Mildhill theme <= 1.5 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Mildhill <= 1.5 versions.

    Select-Themes Mildhill
  • High 8.1
    CVE-2026-39545

    WordPress Zermatt theme <= 1.6.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Zermatt <= 1.6.1 versions.

    Select-Themes Zermatt
  • High 8.1
    CVE-2026-39580

    WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Micdrop <= 1.3.1 versions.

    Select-Themes Micdrop
  • High 8.1
    CVE-2026-39567

    WordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in Santé <= 1.5.1 versions.

    Select-Themes Santé
  • High 8.1
    CVE-2026-39547

    WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability

    Unauthenticated Local File Inclusion in Getaway < 1.8 versions.

    Select-Themes Getaway
  • High 8.1
    CVE-2026-39553

    WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes WaveRide allows PHP Local File Inclusion. This issue affects WaveRide: from n/a through 1.4.

    Select-Themes WaveRide
  • High 8.1
    CVE-2026-25457

    WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Mixtape mixtape allows PHP Local File Inclusion.This issue affects Mixtape: from n/a through <= 2.1.

    Select-Themes Mixtape
  • High 8.1
    CVE-2026-25458

    WordPress Moments theme <= 2.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Moments moments allows PHP Local File Inclusion.This issue affects Moments: from n/a through <= 2.2.

    Select-Themes Moments
  • High 8.1
    CVE-2026-22449

    WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Don Peppe donpeppe allows PHP Local File Inclusion.This issue affects Don Peppe: from n/a through <= 1.3.

    Select-Themes Don Peppe
  • High 8.1
    CVE-2026-22446

    WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 1.8.1.

    Select-Themes Prowess
  • High 8.1
    CVE-2026-22423

    WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes SetSail setsail allows PHP Local File Inclusion.This issue affects SetSail: from n/a through <= 1.8.

    Select-Themes SetSail
  • High 8.1
    CVE-2025-69407

    WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur struktur allows PHP Local File Inclusion.This issue affects Struktur: from n/a through <= 2.5.1.

    Select-Themes Struktur
  • High 7.5
    CVE-2026-24531

    WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Prowess prowess allows PHP Local File Inclusion.This issue affects Prowess: from n/a through <= 2.3.

    Select-Themes Prowess
  • High 7.5
    CVE-2025-68068

    WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through <= 9.14.1.

    Select-Themes Stockholm
  • High 7.5
    CVE-2025-68067

    WordPress Stockholm Core plugin <= 2.4.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Stockholm Core stockholm-core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through <= 2.4.6.

    Select-Themes Stockholm Core
  • High 7.5
    CVE-2025-67521

    WordPress Select Core plugin < 2.6 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Select Core select-core allows PHP Local File Inclusion.This issue affects Select Core: from n/a through < 2.6.

    Select-Themes Select Core
  • High 7.5
    CVE-2025-39463

    WordPress Dessau theme < 1.9 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Dessau dessau allows PHP Local File Inclusion.This issue affects Dessau: from n/a through < 1.9.

    Select-Themes Dessau
  • High 8.5
    CVE-2024-34554

    WordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through 2.4.1.

    Select-Themes Stockholm Core
  • High 8.5
    CVE-2024-34552

    WordPress Stockholm theme <= 9.6 - Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6.

    Select-Themes Stockholm
  • High 7.1
    CVE-2024-34553

    WordPress Stockholm Core plugin <= 2.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1.

    Select-Themes Stockholm Core