Skip to content
OpenAdvisories

Vendor

thembay

36 known vulnerabilities.

thembay at a glance

Last 12 months
20
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 10 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 7 vulnerabilities March 2026: 1 vulnerability Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 2 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202620
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202610
Feb 202670
Jan 202600
Dec 2025100
Nov 202500
Oct 202500
Sep 202500
Aug 202520
Jul 202500
Jun 2025140
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Most common weaknesses

Products

Diza 4 Urna 4 Aora 4 Hara 3 Nika 3 Fana 3 Zota 3 Besa 3 Greenmart 2 Puca 2 Maia 1 Sapa 1 Lasa 1 Ruza 1 Cena Store 1
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • High 7.1
    CVE-2026-66610

    WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

    thembay Urna
  • High 7.1
    CVE-2026-66612

    WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

    thembay Aora
  • High 8.1
    CVE-2026-27381

    WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

    thembay Aora
  • High 8.1
    CVE-2025-68545

    WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.

    thembay Nika
  • High 8.1
    CVE-2025-68543

    WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.

    thembay Diza
  • High 8.1
    CVE-2025-68539

    WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.

    thembay Fana
  • High 8.1
    CVE-2025-68536

    WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.

    thembay Zota
  • High 8.1
    CVE-2025-67982

    WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.

    thembay Urna
  • High 8.1
    CVE-2025-67981

    WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.

    thembay Besa
  • High 8.1
    CVE-2025-67980

    WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.

    thembay Hara
  • High 7.5
    CVE-2025-68984

    WordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.39.

    thembay Puca
  • High 7.5
    CVE-2025-68983

    WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.11.

    thembay Greenmart
  • High 7.5
    CVE-2025-68985

    WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

    thembay Aora
  • High 7.5
    CVE-2025-68537

    WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.

    thembay Zota
  • High 7.5
    CVE-2025-68540

    WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.

    thembay Fana
  • High 7.5
    CVE-2025-68546

    WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.

    thembay Nika
  • High 7.5
    CVE-2025-68544

    WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.

    thembay Diza
  • High 7.5
    CVE-2025-67532

    WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.

    thembay Hara
  • High 7.5
    CVE-2025-67530

    WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.

    thembay Besa
  • High 7.5
    CVE-2025-67528

    WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.

    thembay Urna
  • High 8.1
    CVE-2025-48171

    WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allows PHP Local File Inclusion.This issue affects Cena Store: from n/a through <= 2.11.26.

    thembay Cena Store
  • High 8.1
    CVE-2025-54689

    WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.7.

    thembay Urna
  • High 8.1
    CVE-2025-30992

    WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.33.

    thembay Puca
  • High 8.1
    CVE-2025-49883

    WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.3.

    thembay Greenmart
  • High 8.1
    CVE-2025-52729

    WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.9.

    thembay Diza
  • High 8.1
    CVE-2025-49251

    WordPress Fana theme <= 1.1.28 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.28.

    thembay Fana
  • High 8.1
    CVE-2025-49253

    WordPress Lasa theme <= 1.1 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Lasa lasa allows PHP Local File Inclusion.This issue affects Lasa: from n/a through <= 1.1.

    thembay Lasa
  • High 8.1
    CVE-2025-49252

    WordPress Besa theme <= 2.3.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.8.

    thembay Besa
  • High 8.1
    CVE-2025-49255

    WordPress Ruza theme <= 1.0.7 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through <= 1.0.7.

    thembay Ruza
  • High 8.1
    CVE-2025-49254

    WordPress Nika theme <= 1.2.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.8.

    thembay Nika
  • High 8.1
    CVE-2025-49257

    WordPress Zota theme <= 1.3.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.8.

    thembay Zota
  • High 8.1
    CVE-2025-49256

    WordPress Sapa theme <= 1.1.14 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through <= 1.1.14.

    thembay Sapa
  • High 8.1
    CVE-2025-49258

    WordPress Maia theme <= 1.1.15 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through <= 1.1.15.

    thembay Maia
  • High 8.1
    CVE-2025-49259

    WordPress Hara theme <= 1.2.10 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.10.

    thembay Hara
  • High 8.1
    CVE-2025-49261

    WordPress Diza theme <= 1.3.8 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.8.

    thembay Diza
  • High 8.1
    CVE-2025-49260

    WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.9.

    thembay Aora