thembay vulnerabilities

Products

• Aora 4
• Diza 4
• Urna 4
• Besa 3
• Fana 3
• greenmart 3
• Hara 3
• Nika 3
• Zota 3
• Puca 2
• Cena Store 1
• Lasa 1
• Maia 1
• Ruza 1
• Sapa 1

Latest thembay CVEs

Newest publication first · page 1 of 2

1. CVE-2026-66610 WordPress Urna theme <= 2.6.2 - Cross Site Scripting (XSS) vulnerability

   Published 2026-08-24

   High·CVSS 7.1 EPSS 0.25%

   Unauthenticated Cross Site Scripting (XSS) in Urna <= 2.6.2 versions.

2. CVE-2026-66612 WordPress Aora theme <= 1.3.19 - Cross Site Scripting (XSS) vulnerability

   Published 2026-08-20

   High·CVSS 7.1 EPSS 0.25%

   Unauthenticated Cross Site Scripting (XSS) in Aora <= 1.3.19 versions.

3. CVE-2026-27381 WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

   Published 2026-03-05

   High·CVSS 8.1 EPSS 0.47%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

4. CVE-2025-68545 WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.59%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.

5. CVE-2025-68543 WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.64%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.

6. CVE-2025-68536 WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.58%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.

7. CVE-2025-68539 WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.58%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.

8. CVE-2025-67982 WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.69%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.

9. CVE-2025-67981 WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

   Published 2026-02-20

   High·CVSS 8.1 EPSS 0.69%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.

10. CVE-2025-67980 WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

    Published 2026-02-20

    High·CVSS 8.1 EPSS 0.63%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.

11. CVE-2025-68985 WordPress Aora theme <= 1.3.15 - Local File Inclusion vulnerability

    Published 2025-12-30

    High·CVSS 7.5 EPSS 0.46%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.

12. CVE-2025-68983 WordPress Greenmart theme <= 4.2.11 - Local File Inclusion vulnerability

    Published 2025-12-30

    High·CVSS 7.5 EPSS 0.45%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.11.

13. CVE-2025-68984 WordPress Puca theme <= 2.6.39 - Local File Inclusion vulnerability

    Published 2025-12-30

    High·CVSS 7.5 EPSS 0.45%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.39.

14. CVE-2025-68537 WordPress Zota theme <= 1.3.14 - Local File Inclusion vulnerability

    Published 2025-12-24

    High·CVSS 7.5 EPSS 0.39%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.

15. CVE-2025-68540 WordPress Fana theme <= 1.1.35 - Local File Inclusion vulnerability

    Published 2025-12-24

    High·CVSS 7.5 EPSS 0.39%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.

16. CVE-2025-68546 WordPress Nika theme <= 1.2.14 - Local File Inclusion vulnerability

    Published 2025-12-23

    High·CVSS 7.5 EPSS 0.36%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.

17. CVE-2025-68544 WordPress Diza theme <= 1.3.15 - Local File Inclusion vulnerability

    Published 2025-12-23

    High·CVSS 7.5 EPSS 0.39%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.

18. CVE-2025-67532 WordPress Hara theme <= 1.2.17 - Local File Inclusion vulnerability

    Published 2025-12-09

    High·CVSS 7.5 EPSS 0.48%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.

19. CVE-2025-67530 WordPress Besa theme <= 2.3.15 - Local File Inclusion vulnerability

    Published 2025-12-09

    High·CVSS 7.5 EPSS 0.48%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.

20. CVE-2025-67528 WordPress Urna theme <= 2.5.12 - Local File Inclusion vulnerability

    Published 2025-12-09

    High·CVSS 7.5 EPSS 0.48%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.

21. CVE-2025-48171 WordPress Cena Store <= 2.11.26 - Local File Inclusion Vulnerability

    Published 2025-08-20

    High·CVSS 8.1 EPSS 0.54%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allows PHP Local File Inclusion.This issue affects Cena Store: from n/a through <= 2.11.26.

22. CVE-2025-54689 WordPress Urna Theme <= 2.5.7 - Local File Inclusion Vulnerability

    Published 2025-08-14

    High·CVSS 8.1 EPSS 0.58%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.7.

23. CVE-2025-30992 WordPress Puca theme <= 2.6.33 - Local File Inclusion Vulnerability

    Published 2025-06-27

    High·CVSS 8.1 EPSS 0.72%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.33.

24. CVE-2025-49883 WordPress Greenmart theme <= 4.2.3 - Local File Inclusion Vulnerability

    Published 2025-06-27

    High·CVSS 8.1 EPSS 0.72%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.3.

25. CVE-2025-52729 WordPress Diza theme <= 1.3.9 - Local File Inclusion Vulnerability

    Published 2025-06-27

    High·CVSS 8.1 EPSS 0.58%

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.9.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.