Skip to content
OpenAdvisories

Product · thembay

Aora

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2026-66612

    WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

    thembay Aora
  • High 8.1
    CVE-2026-27381

    WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

    thembay Aora
  • High 7.5
    CVE-2025-68985

    WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

    thembay Aora
  • High 8.1
    CVE-2025-49260

    WordPress Aora theme <= 1.3.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.9.

    thembay Aora