Vulnerabilidades em Mikado-Themes

84 resultados
Análise Vexday

Com 81 CVEs catalogadas e 12 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas ao Mikado-Themes merece atenção contínua, ainda que nenhuma delas figure atualmente no catálogo KEV da CISA — taxa abaixo da média geral do catálogo. O tipo de falha mais recorrente é CWE-98 (inclusão remota de arquivos via PHP), uma classe de vulnerabilidade que, quando explorada, pode permitir execução de código arbitrário no servidor. A CVE mais perigosa ativa no momento é CVE-2025-39458, com escore EPSS de 0,0062, indicando probabilidade de exploração ainda baixa a curto prazo. A única CVE de severidade crítica e a ausência de PoCs públicas conhecidas reduzem o risco imediato, mas o ritmo de novas catalogações reforça a necessidade de monitoramento regular.

CVE-2025-66532MEDIUMWordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-22383HIGHWordPress PawFriends - Pet Shop and Veterinary WordPress theme theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22400MEDIUMWordPress Holmes theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22393MEDIUMWordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22391MEDIUMWordPress Cocco theme <= 1.5.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22398MEDIUMWordPress Fleur theme <= 2.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22430MEDIUMWordPress Verdure theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22396MEDIUMWordPress Fiorello theme <= 1.0 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.3%CVE-2026-22458MEDIUMWordPress Wanderland theme <= 1.5 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-40755HIGHWordPress TechLink theme <= 1.3 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40756HIGHWordPress Zoya theme <= 1.4 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-40757HIGHWordPress Château theme <= 1.2.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2026-22406MEDIUMWordPress Overton theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-22411MEDIUMWordPress Dolcino theme <= 1.6 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-22409MEDIUMWordPress Justicia theme <= 1.2 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-22404MEDIUMWordPress Innovio theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-22407MEDIUMWordPress Roam theme <= 2.1.1 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-69032MEDIUMWordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2025-69030MEDIUMWordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%CVE-2026-24631MEDIUMWordPress Rosebud theme <= 1.4 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.2%