axiomthemes - MidnightBSD Security Advisories

CVE-2025-28953

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in axiomthemes smart SEO smartSEO allows SQL Injection.This issue affects smart SEO: from n/a through <= 4.0.

Products Affected

Vendor	Product	Version
axiomthemes	smart_seo	*
axiomthemes	smartseo	-

CVE-2025-49073

Deserialization of Untrusted Data vulnerability in axiomthemes Sweet Dessert sweet-dessert allows Object Injection.This issue affects Sweet Dessert: from n/a through < 1.1.13.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
audit@patchstack.com	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
axiomthemes	sweet_dessert	*

CVE-2025-53435

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Plan My Day planmyday allows PHP Local File Inclusion.This issue affects Plan My Day: from n/a through <= 1.1.13.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	plan_my_day	*

CVE-2025-53438

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes FitLine fitline allows PHP Local File Inclusion.This issue affects FitLine: from n/a through <= 1.6.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	fitline	*

CVE-2025-53439

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Harper harper allows PHP Local File Inclusion.This issue affects Harper: from n/a through <= 1.13.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	harper	*

CVE-2025-53441

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Greeny greeny allows PHP Local File Inclusion.This issue affects Greeny: from n/a through <= 2.6.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	greeny	*

CVE-2025-53442

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rentic rentic allows PHP Local File Inclusion.This issue affects Rentic: from n/a through <= 1.1.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	rentic	*

CVE-2025-53443

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Smash smash allows PHP Local File Inclusion.This issue affects Smash: from n/a through <= 1.7.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	smash	*

CVE-2025-53445

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Catwalk catwalk allows PHP Local File Inclusion.This issue affects Catwalk: from n/a through <= 1.4.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	catwalk	*

CVE-2025-53446

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Beautique beautique allows PHP Local File Inclusion.This issue affects Beautique: from n/a through <= 1.5.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	beautique	*

CVE-2025-53447

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Assembly assembly allows PHP Local File Inclusion.This issue affects Assembly: from n/a through <= 1.1.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	assembly	*

CVE-2025-53448

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rally rally allows PHP Local File Inclusion.This issue affects Rally: from n/a through <= 1.1.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	rally	*

CVE-2025-53449

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Convex convex allows PHP Local File Inclusion.This issue affects Convex: from n/a through <= 1.11.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	convex	*

CVE-2025-53453

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Hygia hygia allows PHP Local File Inclusion.This issue affects Hygia: from n/a through <= 1.16.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	hygia	*

CVE-2025-58225

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Paragon paragon allows PHP Local File Inclusion.This issue affects Paragon: from n/a through <= 1.1.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	paragon	*

CVE-2025-58706

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Woo Hoo woohoo allows PHP Local File Inclusion.This issue affects Woo Hoo: from n/a through <= 1.25.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	woo_hoo	*

CVE-2025-58708

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes 777 triple-seven allows PHP Local File Inclusion.This issue affects 777: from n/a through <= 1.3.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	777	*

CVE-2025-58709

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Legacy legacy allows PHP Local File Inclusion.This issue affects Legacy: from n/a through <= 1.9.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	legacy	*

CVE-2025-58803

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Algenix algenix allows PHP Local File Inclusion.This issue affects Algenix: from n/a through <= 1.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	algenix	*

CVE-2025-58889

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Towny towny allows PHP Local File Inclusion.This issue affects Towny: from n/a through <= 1.16.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	towny	*

CVE-2025-58893

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Alright alright allows PHP Local File Inclusion.This issue affects Alright: from n/a through <= 1.6.1.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	alright	*

CVE-2025-58894

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Good Mood good-mood allows PHP Local File Inclusion.This issue affects Good Mood: from n/a through <= 1.16.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	good_mood	*

CVE-2025-58923

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Critique critique allows PHP Local File Inclusion.This issue affects Critique: from n/a through <= 1.17.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	critique	*

CVE-2025-58925

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Neptunus neptunus allows PHP Local File Inclusion.This issue affects Neptunus: from n/a through <= 1.0.11.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	neptunus	*

CVE-2025-58926

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Cerebrum cerebrum allows PHP Local File Inclusion.This issue affects Cerebrum: from n/a through <= 1.12.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	cerebrum	*

CVE-2025-58927

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Stallion stallion allows PHP Local File Inclusion.This issue affects Stallion: from n/a through <= 1.17.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	stallion	*

CVE-2025-58928

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Heart heart allows PHP Local File Inclusion.This issue affects Heart: from n/a through <= 1.8.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	heart	*

CVE-2025-58929

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pantry pantry allows PHP Local File Inclusion.This issue affects Pantry: from n/a through <= 1.4.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	pantry	*

CVE-2025-58930

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes FitFlex fitflex allows PHP Local File Inclusion.This issue affects FitFlex: from n/a through <= 1.6.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	fitflex	*

CVE-2025-58931

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Palatio palatio allows PHP Local File Inclusion.This issue affects Palatio: from n/a through <= 1.6.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	palatio	*

CVE-2025-58932

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Prisma prisma allows PHP Local File Inclusion.This issue affects Prisma: from n/a through <= 1.10.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	prisma	*

CVE-2025-58933

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Anubis anubis allows PHP Local File Inclusion.This issue affects Anubis: from n/a through <= 1.25.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	anubis	*

CVE-2025-58934

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes The Gig thegig allows PHP Local File Inclusion.This issue affects The Gig: from n/a through <= 1.18.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	the_gig	*

CVE-2025-58935

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lunna lunna allows PHP Local File Inclusion.This issue affects Lunna: from n/a through <= 1.15.

Products Affected

Vendor	Product	Version
axiomthemes	lunna	*

CVE-2025-58936

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Catamaran catamaran allows PHP Local File Inclusion.This issue affects Catamaran: from n/a through <= 1.15.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	catamaran	*

CVE-2025-58937

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Tacticool tacticool allows PHP Local File Inclusion.This issue affects Tacticool: from n/a through <= 1.0.13.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	tacticool	*

CVE-2025-58940

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Basil basil allows PHP Local File Inclusion.This issue affects Basil: from n/a through <= 1.3.12.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	basil	*

CVE-2025-58941

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Fabric fabric allows PHP Local File Inclusion.This issue affects Fabric: from n/a through <= 1.5.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	fabric	*

CVE-2025-58942

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Dwell dwell allows PHP Local File Inclusion.This issue affects Dwell: from n/a through <= 1.7.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	dwell	*

CVE-2025-58943

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Agricola agricola allows PHP Local File Inclusion.This issue affects Agricola: from n/a through <= 1.1.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	agricola	*

CVE-2025-58944

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Manufactory manufactory allows PHP Local File Inclusion.This issue affects Manufactory: from n/a through <= 1.4.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	manufactory	*

CVE-2025-58945

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes EcoGrow ecogrow allows PHP Local File Inclusion.This issue affects EcoGrow: from n/a through <= 1.7.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	ecogrow	*

CVE-2025-58946

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Vocal vocal allows PHP Local File Inclusion.This issue affects Vocal: from n/a through <= 1.12.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	vocal	*

CVE-2025-58947

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Athos athos allows PHP Local File Inclusion.This issue affects Athos: from n/a through <= 1.9.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	athos	*

CVE-2025-58948

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Aromatica aromatica allows PHP Local File Inclusion.This issue affects Aromatica: from n/a through <= 1.8.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	aromatica	*

CVE-2025-58949

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Spock spock allows PHP Local File Inclusion.This issue affects Spock: from n/a through <= 1.17.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	spock	*

CVE-2025-58950

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Lione lione allows PHP Local File Inclusion.This issue affects Lione: from n/a through <= 1.16.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	lione	*

CVE-2025-60046

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes HeartStar heartstar allows PHP Local File Inclusion.This issue affects HeartStar: from n/a through <= 1.0.14.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	heartstar	*

CVE-2025-60047

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes IPharm ipharm allows PHP Local File Inclusion.This issue affects IPharm: from n/a through <= 1.2.3.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	ipharm	*

CVE-2025-60048

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Tripster tripster allows PHP Local File Inclusion.This issue affects Tripster: from n/a through <= 1.0.10.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	tripster	*

CVE-2025-60049

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Soleil soleil allows PHP Local File Inclusion.This issue affects Soleil: from n/a through <= 1.17.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	soleil	*

CVE-2025-60050

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Panda panda allows PHP Local File Inclusion.This issue affects Panda: from n/a through <= 1.21.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	panda	*

CVE-2025-60059

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes smart SEO smartSEO allows PHP Local File Inclusion.This issue affects smart SEO: from n/a through <= 2.12.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	smartseo	*

CVE-2025-60060

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pubzinne pubzinne allows PHP Local File Inclusion.This issue affects Pubzinne: from n/a through <= 1.0.12.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	pubzinne	*

CVE-2025-60061

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Kicker kicker allows PHP Local File Inclusion.This issue affects Kicker: from n/a through <= 2.2.0.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9

Products Affected

Vendor	Product	Version
axiomthemes	kicker	*

CVE-2025-60063

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Rosalinda rosalinda allows PHP Local File Inclusion.This issue affects Rosalinda: from n/a through <= 1.2.3.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.2	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N	3.9	4.2

Products Affected

Vendor	Product	Version
axiomthemes	rosalinda	*

CVE-2025-60064

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Renewal renewal allows PHP Local File Inclusion.This issue affects Renewal: from n/a through <= 1.2.2.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	renewal	*

CVE-2025-60065

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Pinevale pinevale allows PHP Local File Inclusion.This issue affects Pinevale: from n/a through <= 1.0.14.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	pinevale	*

CVE-2025-60066

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Katelyn katelyn allows PHP Local File Inclusion.This issue affects Katelyn: from n/a through <= 1.0.10.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	katelyn	*

CVE-2025-60067

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Giardino giardino allows PHP Local File Inclusion.This issue affects Giardino: from n/a through <= 1.1.10.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	8.1	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N	2.8	5.2

Products Affected

Vendor	Product	Version
axiomthemes	giardino	*

CVE-2025-60226

Deserialization of Untrusted Data vulnerability in axiomthemes White Rabbit whiterabbit allows Object Injection.This issue affects White Rabbit: from n/a through <= 1.5.2.

CVSS 3.x

Source	Score	Severity	Vector	Exploitability	Impact
134c704f-9b21-4f2e-91b3-4a467353bcc0	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9

Products Affected

Vendor	Product	Version
axiomthemes	white_rabbit	*

Advisories for axiomthemes