LiquidThemes vulnerabilities
We track 5 vulnerabilities in LiquidThemes products across 5 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
Latest LiquidThemes vulnerabilities
- 8.8 High severity
Booking Hub: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1.
- 7.5 High severity
Hub Core: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LiquidThemes Hub Core allows PHP Local File Inclusion. This issue affects Hub Core: from n/a before 6.0.2.
- 10.0 Critical severity
LogisticsHub: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes LogisticsHub logistics-hub allows Upload a Web Shell to a Web Server.This issue affects LogisticsHub: from n/a through <= 1.1.6.
- 9.8 Critical severity
AI Hub - Startup & Technology WordPress Theme: Unrestricted Upload of File with Dangerous Type
The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to, and including, 1.3.7. This makes it possible for unauthenticated attackers to upload arbitrary files
- 10.0 Critical severity
AI Hub: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub: from n/a through <= 1.3.7.