Case-Themes vulnerabilities
We track 4 vulnerabilities in Case-Themes products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.
Latest Case-Themes vulnerabilities
- 7.5 High severity
Case Theme User: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through < 1.0.4.
- 9.9 Critical severity
Case Addons: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in Case-Themes Case Addons case-addons.This issue affects Case Addons: from n/a through < 1.3.0.
- 9.8 Critical severity
Case Theme User: Authentication Bypass Using an Alternate Path or Channel
The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_cal
- 7.5 High severity
CTUsers: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case-Themes CTUsers ctuser allows PHP Local File Inclusion.This issue affects CTUsers: from n/a through <= 1.0.0.