Skip to content
OpenAdvisories

Vendor

Zozothemes

15 known vulnerabilities.

Zozothemes at a glance

Last 12 months
13
Critical · all time
9
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 0 vulnerabilities Dec 2025 January 2026: 4 vulnerabilities, 2 critical February 2026: 1 vulnerability, 1 critical March 2026: 4 vulnerabilities, 4 critical Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability, 1 critical Jun July 2026: 2 vulnerabilities, 1 critical August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202621
Jun 202611
May 202600
Apr 202600
Mar 202644
Feb 202611
Jan 202642
Dec 202500
Nov 202520
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202510
Feb 202500
Jan 202500
Dec 202400

Products

Corpkit 3 Miion 2 Zegen 2 Restaurt 1 Keenarch 1 Zegen Core 1 Charety 1 Zegen - Church WordPress Theme 1 Nutrie 1 Lendiz 1 Wiguard 1
All Critical High Medium Low Exploited only Public exploit

15 results · Feed

  • Critical 9.9
    CVE-2026-27419

    WordPress Zegen theme <= 1.1.9 - Arbitrary File Upload vulnerability

    Subscriber Arbitrary File Upload in Zegen <= 1.1.9 versions.

    Zozothemes Zegen
  • Medium 6.5
    CVE-2025-69132

    WordPress Corpkit theme <= 1.0.5 - Sensitive Data Exposure vulnerability

    Subscriber Sensitive Data Exposure in Corpkit <= 1.0.5 versions.

    Zozothemes Corpkit
  • Critical 9.9
    CVE-2026-22327

    WordPress Restaurt theme <= 1.0.4 - Arbitrary File Upload vulnerability

    Subscriber Arbitrary File Upload in Restaurt <= 1.0.4 versions.

    Zozothemes Restaurt
  • Critical 9.9
    CVE-2026-24960

    WordPress Charety theme < 2.0.2 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Charety charety allows Using Malicious Files.This issue affects Charety: from n/a through < 2.0.2.

    Zozothemes Charety
  • Critical 9.9
    CVE-2025-68554

    WordPress Keenarch theme < 2.0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Keenarch keenarch allows Using Malicious Files.This issue affects Keenarch: from n/a through < 2.0.1.

    Zozothemes Keenarch
  • Critical 9.9
    CVE-2025-68553

    WordPress Lendiz theme < 2.0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Lendiz lendiz allows Upload a Web Shell to a Web Server.This issue affects Lendiz: from n/a through < 2.0.1.

    Zozothemes Lendiz
  • Critical 9.9
    CVE-2025-68555

    WordPress Nutrie theme < 2.0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Nutrie nutrie allows Upload a Web Shell to a Web Server.This issue affects Nutrie: from n/a through < 2.0.1.

    Zozothemes Nutrie
  • Critical 9.9
    CVE-2025-68549

    WordPress Wiguard theme < 2.0.1 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Wiguard wiguard allows Upload a Web Shell to a Web Server.This issue affects Wiguard: from n/a through < 2.0.1.

    Zozothemes Wiguard
  • Critical 9.9
    CVE-2025-68986

    WordPress Miion theme <= 1.2.7 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Miion miion allows Upload a Web Shell to a Web Server.This issue affects Miion: from n/a through <= 1.2.7.

    Zozothemes Miion
  • High 7.5
    CVE-2025-68913

    WordPress Miion theme <= 1.2.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Miion miion allows PHP Local File Inclusion.This issue affects Miion: from n/a through <= 1.2.7.

    Zozothemes Miion
  • Critical 9.9
    CVE-2025-67924

    WordPress Corpkit theme <= 2.0 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in zozothemes Corpkit corpkit allows Upload a Web Shell to a Web Server.This issue affects Corpkit: from n/a through <= 2.0.

    Zozothemes Corpkit
  • High 7.5
    CVE-2025-67925

    WordPress Corpkit theme <= 2.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Corpkit corpkit allows PHP Local File Inclusion.This issue affects Corpkit: from n/a through <= 2.0.

    Zozothemes Corpkit
  • High 8.8
    CVE-2025-11087

    Zegen Core <= 2.0.1 - Cross-Site Request Forgery to Arbitrary File Upload

    The Zegen Core plugin for WordPress is vulnerable to Cross-Site Request Forgery to Arbitrary File Upload in versions up to, and including, 2.0.1. This is due to missing nonce validation and missing file type validation in the '/custom-font-code/custom-fonts-u…

    Zozothemes Zegen Core Web / CMS
  • High 7.5
    CVE-2025-53252

    WordPress Zegen Theme <= 1.1.9 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zozothemes Zegen zegen allows PHP Local File Inclusion.This issue affects Zegen: from n/a through <= 1.1.9.

    Zozothemes Zegen
  • Medium 4.3
    CVE-2025-2289

    Zegen - Church WordPress Theme <= 1.1.9 - Missing Authorization to Authenticated (Subscriber+) Theme Options Updates

    The Zegen - Church WordPress Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on several AJAX endpoints in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Subsc…

    Zozothemes Zegen - Church WordPress Theme Web / CMS