Mikado Themes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| PawFriends - Pet Shop and Veterinary WordPress Theme | 3 | – | Feb 20, 2026 |
| Wanderland | 3 | – | Mar 5, 2026 |
| Mikado Core | 3 | – | Jun 17, 2026 |
| Overton | 2 | – | Mar 5, 2026 |
| Powerlift | 2 | – | Jan 22, 2026 |
| Fiorello | 2 | – | Mar 5, 2026 |
| Rosebud | 2 | – | Mar 25, 2026 |
| FiveStar | 2 | – | Feb 20, 2026 |
| Holmes | 2 | – | Mar 5, 2026 |
| Innovio | 2 | – | Mar 5, 2026 |
| Justicia | 2 | – | Mar 5, 2026 |
| Fleur | 2 | – | Mar 5, 2026 |
| Dør | 2 | – | Jul 13, 2026 |
| Verdure | 2 | – | Mar 5, 2026 |
| LuxeDrive | 2 | – | Jun 16, 2026 |
| Curly | 2 | – | Jan 22, 2026 |
| Wilmër | 2 | – | Dec 9, 2025 |
| Cocco | 2 | – | Mar 5, 2026 |
| Backpack Traveler | 2 | – | Dec 30, 2025 |
| Biagiotti Core | 2 | – | Aug 13, 2026 |
| Dolcino | 2 | – | Mar 5, 2026 |
| GrandPrix | 1 | – | Jun 9, 2025 |
| Grill and Chow | 1 | – | Jun 9, 2025 |
| Halstein | 1 | – | Mar 25, 2026 |
| HealthFirst | 1 | – | Feb 20, 2026 |
| Hendon | 1 | – | Jan 8, 2026 |
| Kastell | 1 | – | Jun 17, 2026 |
| Lekker | 1 | – | Dec 30, 2025 |
| Malgré | 1 | – | Mar 5, 2026 |
| Marra | 1 | – | Mar 5, 2026 |
| MediClinic | 1 | – | Jun 9, 2025 |
| MultiOffice | 1 | – | Mar 25, 2026 |
| Optimize | 1 | – | Jan 8, 2026 |
| Roam | 1 | – | Jan 22, 2026 |
| ShiftUp | 1 | – | Jun 17, 2026 |
| Stål | 1 | – | Mar 25, 2026 |
| TechLink | 1 | – | Jun 16, 2026 |
| TopFit - Fitness and Gym WordPress Theme | 1 | – | Mar 5, 2026 |
| TopScorer - Sports WordPress Theme | 1 | – | Mar 5, 2026 |
| TouchUp | 1 | – | Oct 10, 2026 |
| Wellspring | 1 | – | Jan 8, 2026 |
| Wilmer Core | 1 | – | Sep 9, 2025 |
| Amfissa | 1 | – | Mar 25, 2026 |
| Zoya | 1 | – | Jun 17, 2026 |
| Ashtanga | 1 | – | Jun 16, 2026 |
| Aviana | 1 | – | Mar 5, 2026 |
| Bard | 1 | – | Oct 31, 2025 |
| Belfort | 1 | – | Mar 25, 2026 |
| Biagiotti | 1 | – | Jan 22, 2026 |
| Biagiotti Membership | 1 | – | Dec 18, 2024 |
| ChapterOne | 1 | – | Jun 17, 2026 |
| Château | 1 | – | Jun 17, 2026 |
| Cortex | 1 | – | Mar 5, 2026 |
| Curly Core | 1 | – | Mar 25, 2026 |
| Depot | 1 | – | Jan 22, 2026 |
| Deston | 1 | – | Mar 25, 2026 |
| EasyMeals | 1 | – | Jun 17, 2026 |
| Emaurri | 1 | – | Mar 25, 2026 |
| Eona | 1 | – | Mar 5, 2026 |
| Esmée | 1 | – | Jun 16, 2026 |
| Evently | 1 | – | Mar 5, 2026 |
| Foton | 1 | – | May 19, 2025 |
| Foton Core | 1 | – | Aug 13, 2026 |
| GoTravel | 1 | – | Mar 5, 2026 |
Exploited and recent CVEs
- CVE-2026-62020 WordPress TouchUp theme < 1.4 - Local File Inclusion vulnerability 0.3%
- CVE-2026-66657 WordPress Biagiotti Core plugin <= 2.1.1 - Local File Inclusion vulnerability 0.5%
- CVE-2026-66656 WordPress Foton Core plugin <= 1.1.1 - Local File Inclusion vulnerability 0.5%
- CVE-2026-57792 WordPress Dør theme <= 2.4.1 - Local File Inclusion vulnerability 0.5%
- CVE-2026-52707 WordPress Kastell theme <= 2.0 - Local File Inclusion vulnerability 0.5%
- CVE-2026-40757 WordPress Château theme <= 1.2.1 - PHP Object Injection vulnerability 0.2%
- CVE-2026-40756 WordPress Zoya theme <= 1.4 - PHP Object Injection vulnerability 0.2%
- CVE-2026-40733 WordPress ShiftUp theme <= 1.3 - PHP Object Injection vulnerability 0.3%
- CVE-2026-40753 WordPress EasyMeals theme <= 1.5.1 - PHP Object Injection vulnerability 0.3%
- CVE-2026-40731 WordPress ChapterOne theme <= 1.7 - Local File Inclusion vulnerability 0.4%
- CVE-2026-39537 WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability 0.4%
- CVE-2026-40759 WordPress Esmée theme <= 1.4 - PHP Object Injection vulnerability 0.3%
- CVE-2026-40755 WordPress TechLink theme <= 1.3 - PHP Object Injection vulnerability 0.2%
- CVE-2026-40751 WordPress Ashtanga theme <= 1.2 - PHP Object Injection vulnerability 0.3%
- CVE-2026-40739 WordPress LuxeDrive theme <= 1.4 - PHP Object Injection vulnerability 0.3%
- CVE-2026-39538 WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability 0.4%
- CVE-2026-32511 WordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability 0.2%
- CVE-2026-32508 WordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability 0.2%
- CVE-2026-27081 WordPress Rosebud theme <= 1.4 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27080 WordPress Deston theme <= 1.0 - Local File Inclusion vulnerability 0.5%
- CVE-2026-27079 WordPress Amfissa theme <= 1.1 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27078 WordPress Emaurri theme <= 1.0.1 - Local File Inclusion vulnerability 0.5%
- CVE-2026-27077 WordPress MultiOffice theme <= 1.2 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27076 WordPress LuxeDrive theme <= 1.0 - Local File Inclusion vulnerability 0.5%
- CVE-2026-27075 WordPress Belfort theme <= 1.0 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27047 WordPress Curly Core plugin <= 2.1.6 - Local File Inclusion vulnerability 0.4%
- CVE-2026-27342 WordPress TopFit - Fitness and Gym WordPress Theme theme <= 1.9 - Local File Inclusion vulnerability 0.5%
- CVE-2026-27341 WordPress TopScorer - Sports WordPress Theme theme <= 1.2 - Local File Inclusion vulnerability 0.5%
- CVE-2026-22457 WordPress Wanderland theme <= 1.5 - Local File Inclusion vulnerability 0.6%
- CVE-2026-22429 WordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability 0.6%