Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how mikado-themes compares to other vendors in security performance

View Risk Score →

Software

mikado-themes pawfriends - pet shop and veterinary wordpress theme
3
mikado-themes backpack traveler
2
mikado-themes dolcino
2
mikado-themes fiorello
2
mikado-themes fivestar
2
mikado-themes overton
2
mikado-themes powerlift
2
mikado-themes verdure
2
mikado-themes wanderland
2
mikado-themes wilmër
2
mikado-themes amfissa
1
mikado-themes aviana
1
mikado-themes bard
1
mikado-themes belfort (wordpress theme)
1
mikado-themes cocco
1
mikado-themes cocco (wordpress theme)
1
mikado-themes cortex
1
mikado-themes curly
1
mikado-themes curly core
1
mikado-themes depot
1
mikado-themes deston (wordpress theme)
1
mikado-themes dør
1
mikado-themes emaurri
1
mikado-themes eona
1
mikado-themes evently
1
mikado-themes fleur (wordpress theme)
1
mikado-themes foton
1
mikado-themes gotravel
1
mikado-themes grandprix
1
mikado-themes grill
1
mikado-themes halstein
1
mikado-themes healthfirst
1
mikado-themes hendon
1
mikado-themes holmes
1
mikado-themes innovio
1
mikado-themes innovio (wordpress theme)
1
mikado-themes justicia
1
mikado-themes lekker
1
mikado-themes luxedrive
1
mikado-themes malgré
1
mikado-themes marra
1
mikado-themes mediclinic
1
mikado-themes mikado core
1
mikado-themes multioffice (wordpress theme)
1
mikado-themes optimize
1
mikado-themes roam
1
mikado-themes rosebud
1
mikado-themes stal
1
mikado-themes wellspring
1
mikado-themes wordpress rosebud theme
1

Mikado-Themes Mikado CoreWordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability

Risk 70
Severity
7.5
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Mikado Core mikado-core allows PHP Local File Inclusion.This issue affects Mikado Core: from n/a through <= 1.6.

First published (updated )
CVE-2026-39538

Mikado-Themes MediClinicWordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability

Risk 61
Severity
9.8
EPSS
0.06%
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.

Remedy

Update the WordPress MediClinic theme to the latest available version (at least 2.2).
First published (updated )
CVE-2025-49295

Mikado-Themes GrillWordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability

Risk 61
Severity
9.8
EPSS
0.06%
Path Traversal
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through <= 1.6.

Remedy

Update the WordPress Grill and Chow theme to the latest available version (at least 1.6.1).
First published (updated )
CVE-2025-49297

Mikado-Themes StalWordPress Stål theme < 1.7 - Arbitrary Object Instantiation vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7.

First published (updated )
CVE-2026-32511

Mikado-Themes HalsteinWordPress Halstein theme < 1.8 - Arbitrary Object Instantiation vulnerability

Risk 34
Severity
5.4
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.

First published (updated )
CVE-2026-32508

Mikado-Themes HealthFirstWordPress HealthFirst theme <= 1.0.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes HealthFirst healthfirst allows PHP Local File Inclusion.This issue affects HealthFirst: from n/a through <= 1.0.1.

First published (updated )
CVE-2025-69408

Mikado-Themes PowerliftWordPress Powerlift theme < 3.2.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Powerlift powerlift allows PHP Local File Inclusion.This issue affects Powerlift: from n/a through < 3.2.1.

First published (updated )
CVE-2025-67940

Mikado-Themes HendonWordPress Hendon theme < 1.7 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a through < 1.7.

First published (updated )
CVE-2025-67937

Mikado-Themes OptimizeWordPress Optimize theme < 2.4 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4.

First published (updated )
CVE-2025-67935

Mikado-Themes WanderlandWordPress Wanderland theme <= 1.5 - Broken Access Control vulnerability

Risk 19
Severity
5.3
EPSS
0.04%
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Missing Authorization vulnerability in Mikado-Themes Wanderland wanderland allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wanderland: from n/a through <= 1.5.

First published (updated )
CVE-2026-22458

Mikado-Themes VerdureWordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Verdure verdure allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Verdure: from n/a through <= 1.6.

First published (updated )
CVE-2026-22430

Mikado-Themes VerdureWordPress Verdure theme <= 1.6 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Verdure verdure allows PHP Local File Inclusion.This issue affects Verdure: from n/a through <= 1.6.

First published (updated )
CVE-2026-22429

Mikado-Themes GoTravelWordPress GoTravel theme <= 2.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes GoTravel gotravel allows PHP Local File Inclusion.This issue affects GoTravel: from n/a through <= 2.1.

First published (updated )
CVE-2026-22427

Mikado-Themes MarraWordPress Marra theme <= 1.2 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Marra marra allows PHP Local File Inclusion.This issue affects Marra: from n/a through <= 1.2.

First published (updated )
CVE-2026-22414

Mikado-Themes MalgréWordPress Malgré theme <= 1.0.3 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Malgré malgre allows PHP Local File Inclusion.This issue affects Malgré: from n/a through <= 1.0.3.

First published (updated )
CVE-2026-22413

Mikado-Themes EonaWordPress Eona theme <= 1.3 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Eona eona allows PHP Local File Inclusion.This issue affects Eona: from n/a through <= 1.3.

First published (updated )
CVE-2026-22412

Mikado-Themes DolcinoWordPress Dolcino theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Dolcino dolcino allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dolcino: from n/a through <= 1.6.

First published (updated )
CVE-2026-22411

Mikado-Themes DolcinoWordPress Dolcino theme <= 1.6 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dolcino dolcino allows PHP Local File Inclusion.This issue affects Dolcino: from n/a through <= 1.6.

First published (updated )
CVE-2026-22410

Mikado-Themes JusticiaWordPress Justicia theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Justicia justicia allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Justicia: from n/a through <= 1.2.

First published (updated )
CVE-2026-22409

Mikado-Themes RoamWordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Roam roam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Roam: from n/a through <= 2.1.1.

First published (updated )
CVE-2026-22407

Mikado-Themes OvertonWordPress Overton theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Overton overton allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Overton: from n/a through <= 1.3.

First published (updated )
CVE-2026-22406

Mikado-Themes OvertonWordPress Overton theme <= 1.3 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Overton overton allows PHP Local File Inclusion.This issue affects Overton: from n/a through <= 1.3.

First published (updated )
CVE-2026-22405

Mikado-Themes InnovioWordPress Innovio theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Innovio innovio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Innovio: from n/a through <= 1.7.

First published (updated )
CVE-2026-22404

Mikado-Themes Innovio (WordPress theme)WordPress Innovio theme <= 1.9 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Innovio innovio allows PHP Local File Inclusion.This issue affects Innovio: from n/a through <= 1.7.

1 / 2
Source: NVD
First published (updated )
CVE-2026-22403

Mikado-Themes HolmesWordPress Holmes theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Holmes holmes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Holmes: from n/a through <= 1.7.

First published (updated )
CVE-2026-22400

Mikado-Themes Fleur (WordPress theme)WordPress Fleur theme <= 2.2.1 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fleur fleur allows PHP Local File Inclusion.This issue affects Fleur: from n/a through <= 2.0.

1 / 2
Source: NVD
First published (updated )
CVE-2026-22397

Mikado-Themes FiorelloWordPress Fiorello theme <= 1.0 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Fiorello fiorello allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fiorello: from n/a through <= 1.0.

First published (updated )
CVE-2026-22396

Mikado-Themes FiorelloWordPress Fiorello theme <= 1.0 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Fiorello fiorello allows PHP Local File Inclusion.This issue affects Fiorello: from n/a through <= 1.0.

First published (updated )
CVE-2026-22395

Mikado-Themes EventlyWordPress Evently theme <= 1.7 - Local File Inclusion vulnerability

Risk 75
Severity
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Evently evently allows PHP Local File Inclusion.This issue affects Evently: from n/a through <= 1.7.

First published (updated )
CVE-2026-22394

Mikado-Themes CurlyWordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerability

Risk 25
Severity
5.4
EPSS
0.03%
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Curly curly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Curly: from n/a through <= 3.3.

First published (updated )
CVE-2026-22393

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203