Skip to content
OpenAdvisories

Vendor

Select-Themes

39 known vulnerabilities.

Products

Stockholm 4 Stockholm Core 4 Struktur 3 Prowess 3 Tonda 2 Select Core 2 Don Peppe 2 SetSail 2 Tonda Core 2 Moments 1 WaveRide 1 Hiroshi 1 Mixtape 1 Getaway 1 Dessau 1 Mildhill 1 Struktur Core 1 Zermatt 1 Santé 1 SetSail Membership 1 Borgholm 1 Micdrop 1 Manufaktur Solutions 1 Tonda Membership 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-22450

    WordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Select-Themes Don Peppe donpeppe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Don Peppe: from n/a through <= 1.3.

    Select-Themes Don Peppe
  • Medium 4.3
    CVE-2026-22447

    WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Select-Themes Prowess prowess allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Prowess: from n/a through <= 1.8.1.

    Select-Themes Prowess
  • Medium 5.4
    CVE-2025-69029

    WordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerability

    Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through <= 2.5.1.

    Select-Themes Struktur
  • Medium 6.5
    CVE-2025-68076

    WordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core stockholm-core allows Stored XSS.This issue affects Stockholm Core: from n/a through <= 2.4.6.

    Select-Themes Stockholm Core
  • Medium 6.5
    CVE-2025-68077

    WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm stockholm allows Stored XSS.This issue affects Stockholm: from n/a through <= 9.14.1.

    Select-Themes Stockholm
  • Medium 6.5
    CVE-2025-67539

    WordPress Select Core plugin < 2.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Select Core select-core allows DOM-Based XSS.This issue affects Select Core: from n/a through < 2.6.

    Select-Themes Select Core