Thembay vulnerabilities

We track 34 vulnerabilities in Thembay products across 15 products. 34 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.

34vulnerabilities

0critical

34high

0exploited

7.9average CVSS score

Latest Thembay vulnerabilities

8.1 High severity
Aora: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-27381Mar 5, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.
8.1 High severity
Nika: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68545Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.
8.1 High severity
Diza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68543Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.
8.1 High severity
Fana: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68539Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.
8.1 High severity
Zota: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68536Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.
8.1 High severity
Urna: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67982Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.
8.1 High severity
Besa: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67981Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.
8.1 High severity
Hara: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67980Feb 20, 2026Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.
7.5 High severity
Aora: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68985Dec 30, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.15.
7.5 High severity
Puca: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68984Dec 30, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.39.
7.5 High severity
Greenmart: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68983Dec 30, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.11.
7.5 High severity
Fana: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68540Dec 24, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.35.
7.5 High severity
Zota: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68537Dec 24, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.14.
7.5 High severity
Nika: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68546Dec 23, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.14.
7.5 High severity
Diza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-68544Dec 23, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.15.
7.5 High severity
Hara: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67532Dec 9, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.17.
7.5 High severity
Besa: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67530Dec 9, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.15.
7.5 High severity
Urna: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-67528Dec 9, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.12.
8.1 High severity
Cena Store: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-48171Aug 20, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Cena Store cena allows PHP Local File Inclusion.This issue affects Cena Store: from n/a through <= 2.11.26.
8.1 High severity
Urna: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-54689Aug 14, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Urna urna allows PHP Local File Inclusion.This issue affects Urna: from n/a through <= 2.5.7.
8.1 High severity
Diza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-52729Jun 27, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.9.
8.1 High severity
Greenmart: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49883Jun 27, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Greenmart greenmart allows PHP Local File Inclusion.This issue affects Greenmart: from n/a through <= 4.2.3.
8.1 High severity
Puca: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-30992Jun 27, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Puca puca allows PHP Local File Inclusion.This issue affects Puca: from n/a through <= 2.6.33.
8.1 High severity
Diza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49261Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Diza diza allows PHP Local File Inclusion.This issue affects Diza: from n/a through <= 1.3.8.
8.1 High severity
Aora: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49260Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Aora aora allows PHP Local File Inclusion.This issue affects Aora: from n/a through <= 1.3.9.
8.1 High severity
Hara: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49259Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Hara hara allows PHP Local File Inclusion.This issue affects Hara: from n/a through <= 1.2.10.
8.1 High severity
Maia: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49258Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Maia maia allows PHP Local File Inclusion.This issue affects Maia: from n/a through <= 1.1.15.
8.1 High severity
Zota: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49257Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Zota zota allows PHP Local File Inclusion.This issue affects Zota: from n/a through <= 1.3.8.
8.1 High severity
Sapa: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49256Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Sapa sapa allows PHP Local File Inclusion.This issue affects Sapa: from n/a through <= 1.1.14.
8.1 High severity
Ruza: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49255Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Ruza ruza allows PHP Local File Inclusion.This issue affects Ruza: from n/a through <= 1.0.7.
8.1 High severity
Nika: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49254Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Nika nika allows PHP Local File Inclusion.This issue affects Nika: from n/a through <= 1.2.8.
8.1 High severity
Lasa: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49253Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Lasa lasa allows PHP Local File Inclusion.This issue affects Lasa: from n/a through <= 1.1.
8.1 High severity
Besa: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49252Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Besa besa allows PHP Local File Inclusion.This issue affects Besa: from n/a through <= 2.3.8.
8.1 High severity
Fana: Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2025-49251Jun 17, 2025Thembay
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in thembay Fana fana allows PHP Local File Inclusion.This issue affects Fana: from n/a through <= 1.1.28.