Skip to content
OpenAdvisories

Vendor

TeconceTheme

15 known vulnerabilities.

TeconceTheme at a glance

Last 12 months
13
Critical · all time
11
Exploited · all time
0
Public exploit · all time
1
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 10 vulnerabilities, 10 critical March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202621
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 20261010
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202510
Jun 202500
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Mayosis Core 3 Allmart 2 Electio Core 1 Medinik Core 1 Nikstore Core 1 Nestbyte Core 1 Saasplate Core 1 Emerce Core 1 Woodly Core 1 Coven Core 1 Crete Core 1 Uroan Core 1
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Critical 9.3
    CVE-2026-73388

    WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.

    TeconceTheme Nikstore Core
  • High 7.1
    CVE-2026-32333

    WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

    TeconceTheme Mayosis Core
  • Medium 5.3
    CVE-2026-39655

    WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7.

    TeconceTheme Mayosis Core
  • Critical 9.3
    CVE-2025-69366

    WordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.8.

    TeconceTheme Emerce Core
  • Critical 9.3
    CVE-2025-69365

    WordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4.

    TeconceTheme Uroan Core
  • Critical 9.3
    CVE-2025-69310

    WordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.4.

    TeconceTheme Woodly Core
  • Critical 9.3
    CVE-2025-69309

    WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a through <= 1.2.8.

    TeconceTheme Saasplate Core
  • Critical 9.3
    CVE-2025-69308

    WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through <= 1.2.

    TeconceTheme Nestbyte Core
  • Critical 9.3
    CVE-2025-69304

    WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.

    TeconceTheme Allmart
  • Critical 9.3
    CVE-2025-69307

    WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <= 1.3.6.

    TeconceTheme Medinik Core
  • Critical 9.3
    CVE-2025-69306

    WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <= 1.4.

    TeconceTheme Electio Core
  • Critical 9.3
    CVE-2025-69305

    WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3.

    TeconceTheme Crete Core
  • Critical 9.3
    CVE-2025-69295 Public exploit

    WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3.

    TeconceTheme Coven Core
  • High 7.2
    CVE-2025-49418

    WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.

    TeconceTheme Allmart
  • High 7.5
    CVE-2025-1565

    Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

    The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary …

    TeconceTheme Mayosis Core Web / CMS