Log in Start free

Select-Themes

Products

ProductCVEsExploitedLatest
Stockholm Core4–Dec 16, 2025
Stockholm4–Dec 16, 2025
Prowess3–Mar 5, 2026
Struktur3–Jul 13, 2026
Tonda2–Aug 24, 2026
Tonda Core2–Aug 24, 2026
Select Core2–Dec 9, 2025
SetSail2–Jul 13, 2026
Don Peppe2–Mar 5, 2026
Santé1–Jun 16, 2026
SetSail Membership1–Mar 1, 2025
Struktur Core1–Jul 13, 2026
Tonda Membership1–Oct 10, 2026
WaveRide1–Jun 2, 2026
Borgholm1–Mar 25, 2026
Zermatt1–Jun 17, 2026
Dessau1–Nov 6, 2025
Getaway1–Jun 16, 2026
Hiroshi1–Jun 17, 2026
Manufaktur Solutions1–Jun 17, 2026
Micdrop1–Jun 16, 2026
Mildhill1–Jun 17, 2026
Mixtape1–Mar 25, 2026
Moments1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-62022 Critical 9.8 WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability 0.3%
  • CVE-2026-28152 High 8.1 WordPress Tonda Core plugin < 2.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-28151 High 8.1 WordPress Tonda theme < 2.6 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-65477 High 7.5 WordPress Tonda Core plugin <= 2.1.2 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-57805 High 7.5 WordPress Tonda theme <= 2.5 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57803 High 7.5 WordPress Struktur Core plugin < 2.7 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57802 High 7.5 WordPress Struktur theme < 2.7 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-57801 High 7.5 WordPress SetSail theme <= 2.1 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-40752 High 8.1 WordPress Manufaktur Solutions theme <= 1.1.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-39560 High 8.1 WordPress Hiroshi theme <= 1.5.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-39573 High 8.1 WordPress Mildhill theme <= 1.5 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-39545 High 8.1 WordPress Zermatt theme <= 1.6.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-39580 High 8.1 WordPress Micdrop theme <= 1.3.1 - PHP Object Injection vulnerability 0.2%
  • CVE-2026-39567 High 8.1 WordPress Santé theme <= 1.5.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-39547 High 8.1 WordPress Getaway theme < 1.8 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-39553 High 8.1 WordPress WaveRide theme <= 1.4 - Local File Inclusion vulnerability 0.3%
  • CVE-2026-32502 Critical 9.8 WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability 0.4%
  • CVE-2026-25458 High 8.1 WordPress Moments theme <= 2.2 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-25457 High 8.1 WordPress Mixtape theme <= 2.1 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-22449 High 8.1 WordPress Don Peppe theme <= 1.3 - Local File Inclusion vulnerability 0.6%
  • CVE-2026-22446 High 8.1 WordPress Prowess theme <= 1.8.1 - Local File Inclusion vulnerability 0.6%
  • CVE-2026-22423 High 8.1 WordPress SetSail theme <= 1.8 - Local File Inclusion vulnerability 0.6%
  • CVE-2025-69407 High 8.1 WordPress Struktur theme <= 2.5.1 - Local File Inclusion vulnerability 0.6%
  • CVE-2026-24531 High 7.5 WordPress Prowess theme <= 2.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2026-22450 Medium 4.3 WordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerability 0.2%
  • CVE-2026-22447 Medium 4.3 WordPress Prowess theme <= 1.8.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69029 Medium 5.4 WordPress Struktur theme <= 2.5.1 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2025-68077 Medium 6.5 WordPress Stockholm theme <= 9.14.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68076 Medium 6.5 WordPress Stockholm Core plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68068 High 7.5 WordPress Stockholm theme <= 9.14.1 - Local File Inclusion vulnerability 0.4%