Skip to content
OpenAdvisories

Vendor

VanKarWai

4 known vulnerabilities.

Products

Lobo 2 Calafate 1 Airtifact 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2026-27343

    WordPress Airtifact theme <= 1.2.91 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Airtifact airtifact allows PHP Local File Inclusion.This issue affects Airtifact: from n/a through <= 1.2.91.

    VanKarWai Airtifact
  • High 8.5
    CVE-2025-67921

    WordPress Lobo theme < 2.8.6 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in VanKarWai Lobo lobo allows Blind SQL Injection.This issue affects Lobo: from n/a through < 2.8.6.

    VanKarWai Lobo
  • High 7.5
    CVE-2025-69342

    WordPress Calafate theme <= 1.7.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in VanKarWai Calafate calafate allows PHP Local File Inclusion.This issue affects Calafate: from n/a through <= 1.7.7.

    VanKarWai Calafate