Edge Themes

Products

ProductCVEsExploitedLatest
Edge CPT2–Oct 24, 2025
Eldon2–Jun 17, 2026
Alloggio - Hotel Booking2–Jun 16, 2026
Overworld2–Jul 13, 2026
Aalto2–Oct 10, 2026
Belletrist1–Feb 20, 2026
Cinerama1–Dec 30, 2025
Gracey1–Mar 25, 2026
Haaken1–Oct 6, 2026
Kamperen1–Mar 25, 2026
Laurits1–Jun 16, 2026
Pelicula1–Mar 25, 2026
Reina1–Jun 17, 2026
Shuffle1–Aug 20, 2026
UrbanGo Membership1–Apr 19, 2025
Valeska1–Jun 16, 2026
Alloggio Membership1–Mar 1, 2025
Archicon1–Mar 25, 2026
Barista1–Aug 13, 2026
Behold1–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-42777 High 8.1 WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-104747 High 8.1 WordPress Haaken theme <= 1.5 - PHP Object Injection vulnerability 0.2%
  • CVE-2025-15637 High 8.1 WordPress Shuffle theme <= 1.8 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-66653 High 8.1 WordPress Barista theme <= 2.5.1 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57800 High 7.5 WordPress Overworld theme <= 1.5 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57788 High 7.5 WordPress Aalto theme <= 1.8 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-40738 High 8.1 WordPress Eldon theme <= 1.4.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-40735 High 8.1 WordPress Reina theme <= 2.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-40761 High 8.1 WordPress Valeska theme <= 1.2.2 - PHP Object Injection vulnerability 0.2%
  • CVE-2026-40760 High 8.1 WordPress Behold theme <= 1.5 - PHP Object Injection vulnerability 0.2%
  • CVE-2026-40736 High 8.1 WordPress Laurits theme <= 1.5.1 - PHP Object Injection vulnerability 0.2%
  • CVE-2026-39539 High 8.1 WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-32512 Critical 9.8 WordPress Pelicula theme < 1.10 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-32510 Medium 5.4 WordPress Kamperen theme < 1.3 - Arbitrary Object Instantiation vulnerability 0.2%
  • CVE-2026-32509 Medium 5.4 WordPress Gracey theme < 1.4 - Arbitrary Object Instantiation vulnerability 0.2%
  • CVE-2026-32506 Medium 5.4 WordPress Archicon theme < 1.7 - Arbitrary Object Instantiation vulnerability 0.2%
  • CVE-2025-69410 High 8.1 WordPress Belletrist theme <= 1.2 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-69057 High 8.1 WordPress Eldon theme <= 1.0 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-69050 High 8.1 WordPress Overworld theme <= 1.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-68987 High 7.5 WordPress Cinerama theme <= 2.9 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-64287 High 8.1 WordPress Alloggio - Hotel Booking Theme theme <= 1.8 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-62868 High 8.1 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-49889 High 8.1 WordPress Edge CPT plugin <= 1.4 - Local File Inclusion vulnerability 0.7%
  • CVE-2025-3278 Critical 9.8 UrbanGo Membership <= 1.0.4 - Unauthenticated Privilege Escalation 0.6%
  • CVE-2025-1638 Critical 9.8 Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover 0.6%