PatchSiren

Zozothemes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Zozothemes CVE published 2026-07-02

CVE-2025-69132

CVE-2025-69132 is a Subscriber Sensitive Data Exposure vulnerability affecting Corpkit version 1.0.5 or earlier. The CVE record was published on 2026-07-02T12:16:53.173Z and has not been modified since then.

CRITICAL Zozothemes CVE published 2026-06-17

CVE-2026-22327

A critical vulnerability was discovered in the Restaurt theme, allowing subscribers to upload arbitrary files. This vulnerability has a CVSS score of 9.9 and is considered critical. It was published on June 17, 2026, and last modified on the same day. The vulnerability affects versions of the Restaurt theme up to 1.0.4. Users of this theme should take immediate action to mitigate the risk.

HIGH zozothemes CVE published 2026-01-08

CVE-2025-67925

A PHP Local File Inclusion vulnerability exists in Corpkit, a theme for WordPress, due to improper control of filename for include/require statements. This issue affects Corpkit versions from n/a through 2.0. The vulnerability allows attackers to potentially access and execute unauthorized files, which could lead to elevated privileges. Defenders should assess exposure and prioritize patching or mitigatio [truncated]

CRITICAL zozothemes CVE published 2026-01-08

CVE-2025-67924

CVE-2025-67924: Unrestricted File Upload vulnerability in Corpkit theme allows web shell upload. Defenders should assess exposure, prioritize remediation, and verify vendor fixes. The vulnerability affects Corpkit theme versions from n/a through <= 2.0. Limited information on affected versions and exploitation is available. Defenders must review the Corpkit theme installation and prioritize remediation du [truncated]