Mikado-Themes vulnerabilities

We track 51 vulnerabilities in Mikado-Themes products across 47 products. 51 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.

51vulnerabilities

5critical

46high

0exploited

8.2average CVSS score

Latest Mikado-Themes vulnerabilities

8.1 High severity
Lekker: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-69034Dec 30, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File Inclusion.This issue affects Lekker: from n/a through <= 1.8.
8.8 High severity
Wilmër: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67515Dec 9, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.5.
8.1 High severity
Wanderland: Path Traversal: '.../...//'
CVE-2025-39467Nov 6, 2025Mikado-Themes
Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.
8.1 High severity
Dør: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-39466Nov 6, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.
9.8 Critical severity
Grill and Chow: Path Traversal: '.../...//'
CVE-2025-49297Jun 9, 2025Mikado-Themes
Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through <= 1.6.
9.8 Critical severity
GrandPrix: Path Traversal: '.../...//'
CVE-2025-49296Jun 9, 2025Mikado-Themes
Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <= 1.6.
9.8 Critical severity
MediClinic: Path Traversal: '.../...//'
CVE-2025-49295Jun 9, 2025Mikado-Themes
Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.
9.8 Critical severity
Wilmër: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-39494May 23, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.4.2.
8.1 High severity
Backpack Traveler: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-39490May 23, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through <=
8.1 High severity
Foton: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-39458May 19, 2025Mikado-Themes
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP Local File Inclusion.This issue affects Foton: from n/a through <= 2.5.2.
9.8 Critical severity
Biagiotti Membership: Improper Authentication
CVE-2024-12287Dec 18, 2024Mikado-Themes
The Biagiotti Membership plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly verifying a user's identity prior to authenticating them. This makes it possible for unauth