PatchSiren

themeStek CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH themeStek CVE published 2026-10-10

CVE-2026-94160

A Cross-site Scripting (XSS) vulnerability exists in ThemeStek Extras for LabtechCO Theme, affecting versions from n/a through 8.4. This issue allows for Reflected XSS. The CVE record was published on 2026-10-10T17:17:01.090Z and has not been modified since then. The NVD entry is currently Received. Defenders should assess exposure and prioritize verification and potential updates or patches. The vulnerab [truncated]

HIGH themeStek CVE published 2026-04-08

CVE-2026-39544

AI-assisted PatchSiren debrief based on the supplied source corpus. CVE-2026-39544 is a PHP Remote File Inclusion vulnerability in themeStek LabtechCO labtechco, allowing PHP Local File Inclusion. The issue affects LabtechCO from n/a through <= 8.3. The vulnerability has a CVSS score of 7.5 and a CVSS severity of HIGH. Users of LabtechCO themeStek LabtechCO up to version 8.3 should assess and mitigate thi [truncated]