Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how axiomthemes compares to other vendors in security performance

View Risk Score →

Software

axiomthemes smart seo
3
axiomthemes smartseo wordpress
2
axiomthemes 777 wordpress
1
axiomthemes agricola wordpress
1
axiomthemes algenix
1
axiomthemes algenix wordpress
1
axiomthemes alright
1
axiomthemes alright wordpress
1
axiomthemes amuli
1
axiomthemes anubis wordpress
1
axiomthemes aromatica wordpress
1
axiomthemes assembly wordpress
1
axiomthemes athos wordpress
1
axiomthemes au pair agency - babysitting & nanny theme
1
axiomthemes balance
1
axiomthemes basil wordpress
1
axiomthemes beautique wordpress
1
axiomthemes cars4rent
1
axiomthemes catamaran wordpress
1
axiomthemes catwalk wordpress
1
axiomthemes cerebrum wordpress
1
axiomthemes confidant
1
axiomthemes conquerors
1
axiomthemes convex
1
axiomthemes convex wordpress
1
axiomthemes crafti
1
axiomthemes critique wordpress
1
axiomthemes dwell
1
axiomthemes dwell wordpress
1
axiomthemes ecogrow wordpress
1
axiomthemes estate
1
axiomthemes fabric wordpress
1
axiomthemes fermentio
1
axiomthemes fitflex wordpress
1
axiomthemes fitline wordpress
1
axiomthemes giardino
1
axiomthemes giardino wordpress
1
axiomthemes good mood
1
axiomthemes good mood wordpress
1
axiomthemes greeny wordpress
1
axiomthemes harper
1
axiomthemes harper wordpress
1
axiomthemes heart wordpress
1
axiomthemes heartstar wordpress
1
axiomthemes helion
1
axiomthemes hygia wordpress
1
axiomthemes ipharm
1
axiomthemes ipharm wordpress
1
axiomthemes katelyn wordpress
1
axiomthemes kicker
1

axiomthemes Sweet DessertWordPress Sweet Dessert < 1.1.13 - PHP Object Injection Vulnerability

Risk 39
Severity
9.8
EPSS
0.05%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.

Remedy

Update the WordPress Sweet Dessert theme to the latest available version (at least 1.1.13).
First published (updated )
CVE-2025-49073

axiomthemes Cars4RentWordPress Cars4Rent Theme <= 1.4.2 - PHP Object Injection Vulnerability

Risk 86
Severity
9.8
XSS
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Deserialization of Untrusted Data vulnerability in axiomthemes Cars4Rent cars4rent allows Object Injection.This issue affects Cars4Rent: from n/a through <= 1.4.2.

1 / 2
Source: MITRE
First published (updated )
CVE-2025-49434

ExpressTech Systems Quiz And Survey MasterWordPress smart SEO Plugin <= 4.0 - Privilege Escalation Vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in ExpressTech Systems Quiz And Survey Master allows Object Injection. This issue affects Quiz And Survey Master: from n/a through 10.2.5.

1 / 2
Source: NVD

Remedy

Update the WordPress Quiz And Survey Master plugin to the latest available version (at least 10.2.6).
First published (updated )
CVE-2025-49401

axiomthemes White RabbitWordPress White Rabbit theme <= 1.5.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.

First published (updated )
CVE-2025-60226

wordpress/axiomthemes/lunnaWordPress Lunna theme <= 1.15 - Local File Inclusion vulnerability

Risk 86
Severity
9.8
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lunna lunna allows PHP Local File Inclusion.This issue affects Lunna: from n/a through <= 1.15.

First published (updated )
CVE-2025-58935

axiomthemes EstateWordPress Estate theme <= 1.3.4 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in axiomthemes Estate estate allows Object Injection.This issue affects Estate: from n/a through <= 1.3.4.

First published (updated )
CVE-2026-22475

axiomthemes m2 | Construction and Tools StoreWordPress m2 | Construction and Tools Store theme <= 1.1.2 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in axiomthemes m2 | Construction and Tools Store m2-ce allows Object Injection.This issue affects m2 | Construction and Tools Store: from n/a through <= 1.1.2.

First published (updated )
CVE-2026-22500

axiomthemes VetoWordPress Veto theme <= 1.6.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in Axiomthemes Veto veto allows Object Injection.This issue affects Veto: from n/a through 1.6.0.

First published (updated )
CVE-2026-93927

axiomthemes BalanceWordPress Balance theme <= 1.12.0 - PHP Object Injection vulnerability

Risk 86
Severity
9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Deserialization of Untrusted Data vulnerability in Axiomthemes Balance balance allows Object Injection.This issue affects Balance: from n/a through 1.12.0.

First published (updated )
CVE-2026-93945

axiomthemes smart SEOWordPress smart SEO plugin <= 4.0 - SQL Injection Vulnerability

Risk 55
Severity
8.5
SQL Injection
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.

First published (updated )
CVE-2025-28953

AncoraThemes InsetWordPress Lab Theme <= 1.0.0 - Local File Inclusion Vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Inset allows PHP Local File Inclusion. This issue affects Inset: from n/a through 1.18.0.

1 / 2
Source: NVD
First published (updated )
CVE-2025-26592

axiomthemes Plan My DayWordPress Plan My Day theme <= 1.1.13 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Plan My Day planmyday allows PHP Local File Inclusion.This issue affects Plan My Day: from n/a through <= 1.1.13.

First published (updated )
CVE-2025-53435

wordpress/axiomthemes/beautiqueWordPress Beautique theme <= 1.5 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Beautique beautique allows PHP Local File Inclusion.This issue affects Beautique: from n/a through <= 1.5.

First published (updated )
CVE-2025-53446

wordpress/catwalkWordPress Catwalk theme <= 1.4 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Catwalk catwalk allows PHP Local File Inclusion.This issue affects Catwalk: from n/a through <= 1.4.

First published (updated )
CVE-2025-53445

WordPress/RenticWordPress Rentic theme <= 1.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rentic rentic allows PHP Local File Inclusion.This issue affects Rentic: from n/a through <= 1.1.

First published (updated )
CVE-2025-53442

wordpress/rallyWordPress Rally theme <= 1.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rally rally allows PHP Local File Inclusion.This issue affects Rally: from n/a through <= 1.1.

First published (updated )
CVE-2025-53448

wordpress/greenyWordPress Greeny theme <= 2.6 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Greeny greeny allows PHP Local File Inclusion.This issue affects Greeny: from n/a through <= 2.6.

First published (updated )
CVE-2025-53441

axiomthemes ConvexWordPress Convex theme <= 1.11 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Convex convex allows PHP Local File Inclusion.This issue affects Convex: from n/a through <= 1.11.

First published (updated )
CVE-2025-53449

wordpress-smashWordPress Smash theme <= 1.7 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Smash smash allows PHP Local File Inclusion.This issue affects Smash: from n/a through <= 1.7.

First published (updated )
CVE-2025-53443

wordpress/hygiaWordPress Hygia theme <= 1.16 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through <= 1.16.

First published (updated )
CVE-2025-53453

wordpress/assemblyWordPress Assembly theme <= 1.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Assembly assembly allows PHP Local File Inclusion.This issue affects Assembly: from n/a through <= 1.1.

First published (updated )
CVE-2025-53447

WordPress FitLineWordPress FitLine theme <= 1.6 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes FitLine fitline allows PHP Local File Inclusion.This issue affects FitLine: from n/a through <= 1.6.

First published (updated )
CVE-2025-53438

axiomthemes HarperWordPress Harper theme <= 1.13 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through <= 1.13.

First published (updated )
CVE-2025-53439

wordpress/catamaranWordPress Catamaran theme <= 1.15 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Catamaran catamaran allows PHP Local File Inclusion.This issue affects Catamaran: from n/a through <= 1.15.

First published (updated )
CVE-2025-58936

npm/axiomthemes/777WordPress 777 theme <= 1.3 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes 777 triple-seven allows PHP Local File Inclusion.This issue affects 777: from n/a through <= 1.3.

First published (updated )
CVE-2025-58708

axiomthemes AlgenixWordPress Algenix theme <= 1.0 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Algenix algenix allows PHP Local File Inclusion.This issue affects Algenix: from n/a through <= 1.0.

First published (updated )
CVE-2025-58803

axiomthemes AlrightWordPress Alright theme <= 1.6.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Alright alright allows PHP Local File Inclusion.This issue affects Alright: from n/a through <= 1.6.1.

First published (updated )
CVE-2025-58893

axiomthemes Good MoodWordPress Good Mood theme <= 1.16 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Good Mood good-mood allows PHP Local File Inclusion.This issue affects Good Mood: from n/a through <= 1.16.

First published (updated )
CVE-2025-58894

wordpress/woohooWordPress Woo Hoo theme <= 1.25 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through <= 1.25.

First published (updated )
CVE-2025-58706

wordpress/heartWordPress Heart theme <= 1.8 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Heart heart allows PHP Local File Inclusion.This issue affects Heart: from n/a through <= 1.8.

First published (updated )
CVE-2025-58928

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203