These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-62022 is a critical unauthenticated privilege escalation vulnerability in Tonda Membership plugin version 1.0.1 and possibly others. Defenders should assess exposure, prioritize remediation, and verify vendor-provided fixes.
A high-severity unauthenticated local file inclusion vulnerability exists in Tonda Core versions less than 2.6. This CVE was published on 2026-08-24T12:16:50.220Z and last modified on 2026-10-12T15:10:00.207Z.
CVE-2026-28151 is a high-severity unauthenticated local file inclusion vulnerability in the Tonda theme for WordPress versions less than 2.6. The vulnerability has a CVSS score of 8.1 and was published on August 24, 2026.
CVE-2026-57805 is a HIGH severity vulnerability in Tonda theme, a PHP Local File Inclusion vulnerability. The CVE record was published on 2026-07-13T10:16:44.807Z and has not been modified since then. The vulnerability allows attackers to include local files via a manipulated filename, potentially leading to unauthorized access or code execution. Users of Tonda theme should be aware of this vulnerability [truncated]
CVE-2026-57803 is a HIGH severity vulnerability (CVSS Score: 7.5) in the Struktur Core plugin, allowing for PHP Local File Inclusion due to improper control of filenames for include/require statements. The vulnerability affects Struktur Core from n/a through version 2.5.1. Users of Struktur Core plugin version 2.5.1 or earlier should apply patches or mitigations to prevent potential PHP Local File Inclusi [truncated]
A PHP Remote File Inclusion vulnerability exists in the Select-Themes Struktur theme, affecting versions from n/a before 2.7. This issue, known as CVE-2026-57802, has a CVSS score of 7.5 and is classified as HIGH severity. The vulnerability allows for PHP Local File Inclusion due to improper control of filename for include/require statements. Defenders and administrators using the Select-Themes Struktur t [truncated]
A PHP Local File Inclusion vulnerability exists in the SetSail theme, affecting versions from n/a through 2.1. This issue, known as CVE-2026-57801, has a CVSS score of 7.5 and is classified as HIGH severity. The vulnerability is caused by improper control of filename for include/require statements in PHP programs, also known as PHP Remote File Inclusion.
CVE-2026-40752 is a HIGH-severity vulnerability (CVSS Score: 8.1) affecting Manufaktur Solutions theme versions <= 1.1.1. This vulnerability allows unauthenticated PHP Object Injection, potentially leading to code execution, data breaches, or system compromise. The vulnerability was published on June 17, 2026, and immediately gained attention due to its high severity and potential impact. Users of the aff [truncated]
CVE-2026-39560 is a high-severity vulnerability in the Hiroshi theme, affecting versions up to 1.5.1. This vulnerability allows unauthenticated attackers to inject PHP objects, potentially leading to code execution and unauthorized access. The CVSS score for this vulnerability is 8.1, indicating a high level of severity. Organizations using the affected versions of the Hiroshi theme should take immediate [truncated]
CVE-2026-39580 is a high-severity vulnerability in the Micdrop theme for WordPress, affecting versions up to and including 1.3.1. The vulnerability allows unauthenticated attackers to inject PHP objects, potentially leading to code execution, data breaches, or other malicious activities. With a CVSS score of 8.1, this vulnerability is considered high-risk and requires immediate attention. Administrators o [truncated]
CVE-2026-39573 is a high-severity vulnerability in the Mildhill theme, allowing unauthenticated PHP object injection. The vulnerability has a CVSS score of 8.1 and was published on June 17, 2026. The affected version is 1.5 or earlier. Users of the Mildhill theme should take immediate action to mitigate this vulnerability. The vulnerability allows attackers to inject malicious PHP objects, potentially lea [truncated]
CVE-2026-39567 is a high-severity vulnerability in the Santé theme for WordPress, allowing unauthenticated PHP object injection. This vulnerability has a CVSS score of 8.1 and was published on 2026-06-17. The affected versions are <= 1.5.1. Users of the Santé theme should take immediate action to mitigate this vulnerability. The vulnerability was reported by Patchstack and is tracked by CVE.org and NVD. N [truncated]
CVE-2026-39547 is an Unauthenticated Local File Inclusion vulnerability in the Getaway theme for WordPress versions before 1.8. The vulnerability has a CVSS score of 8.1 and is classified as HIGH severity. It allows unauthenticated attackers to include local files, potentially leading to code execution, data exposure, or other malicious activities.
CVE-2026-39545 is a high-severity vulnerability in the Zermatt theme, affecting versions up to 1.6.1. The vulnerability allows for unauthenticated PHP object injection, which can lead to significant impacts including high confidentiality, integrity, and availability risks. The CVSS score for this vulnerability is 8.1, indicating a high level of severity. Users of the Zermatt theme should take immediate ac [truncated]