Case Theme User vulnerabilities

2 known vulnerabilities in Case Theme User from Case-Themes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Case Theme User: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2025-5804Apr 10, 2026Case-Themes

  Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Case Themes Case Theme User case-theme-user allows PHP Local File Inclusion.This issue affects Case Theme User: from n/a through < 1.0.4.

• 9.8 Critical severity

  Case Theme User: Authentication Bypass Using an Alternate Path or Channel

  CVE-2025-5821Aug 23, 2025Case-Themes

  The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_cal