Skip to content
OpenAdvisories

Vendor

Thelia

19 known vulnerabilities.

Products

Thelia 17 Thelia Core 3 Thelia Back-office Default Twig Template 3 Thelia Page Module 1 Thelia Back-office Default Template 1 Thelia Smarty Module 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-103526

    CVE-2026-103526

    In Thelia v2.6.0, both the administrative login and forgotten password endpoints return different responses for invalid usernames and incorrect passwords, allowing unauthenticated attackers to enumerate valid administrator accounts. Because the endpoint also …

    Thelia Thelia