Themelexus vulnerabilities
We track 2 vulnerabilities in Themelexus products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Themelexus vulnerabilities
- 7.5 High severity
Kitchor: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Kitchor kitchor allows PHP Local File Inclusion.This issue affects Kitchor: from n/a through <= 1.4.3.
- 7.5 High severity
Medilazar Core: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themelexus Medilazar Core medilazar-core allows PHP Local File Inclusion.This issue affects Medilazar Core: from n/a through < 1.4.7.