# Elated-Themes vulnerabilities Source: https://junglewise.ai/threats/vendors/elated-themes Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/vendors/elated-themes.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 20 vulnerabilities in Elated-Themes: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-112820, was published on 22 October 2026. 1 vulnerability in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 1 - All time: 20 (0 critical, 0 exploited in the wild) ## About Elated-Themes A developer of specialized WordPress themes for various business niches. ## Latest Elated-Themes vulnerabilities - [CVE-2026-112820: Elated-Themes Academist Core local file inclusion](https://junglewise.ai/threats/cve-2026-112820-improper-control-of-filename-for-include-require-statement-in) (high, CVSS 8.1, published 22 Oct 2026) - [CVE-2026-65481: Elated-Themes Vino Local File Inclusion in WordPress theme](https://junglewise.ai/threats/cve-2026-65481-elated-themes-vino-local-file-inclusion-in-wordpress-theme) (high, CVSS 7.5, published 23 Jul 2026) - [CVE-2026-57793: Elated-Themes Flow Local File Inclusion](https://junglewise.ai/threats/cve-2026-57793-elated-themes-flow-local-file-inclusion) (high, CVSS 7.5, published 13 Jul 2026) - [CVE-2026-42382: Elated-Themes Audrey Theme local file inclusion](https://junglewise.ai/threats/cve-2026-42382-elated-themes-audrey-theme-local-file-inclusion) (high, CVSS 8.1, published 2 Jul 2026) - [CVE-2026-39576: Elated-Themes SingleMalt PHP Object Injection](https://junglewise.ai/threats/cve-2026-39576-elated-themes-singlemalt-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39556: Elated-Themes Konsept PHP Object Injection](https://junglewise.ai/threats/cve-2026-39556-elated-themes-konsept-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39523: Elated-Themes Solene Core unauthenticated local file inclusion](https://junglewise.ai/threats/cve-2026-39523-elated-themes-solene-core-unauthenticated-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-40758: Elated-Themes Léonie PHP Object Injection](https://junglewise.ai/threats/cve-2026-40758-elated-themes-leonie-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-40754: Elated-Themes Roisin PHP Object Injection](https://junglewise.ai/threats/cve-2026-40754-elated-themes-roisin-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39578: Elated-Themes Valiance PHP Object Injection](https://junglewise.ai/threats/cve-2026-39578-elated-themes-valiance-php-object-injection) (medium, CVSS 5.5, published 17 Jun 2026) - [CVE-2026-39577: Elated-Themes Playroom PHP Object Injection](https://junglewise.ai/threats/cve-2026-39577-elated-themes-playroom-php-object-injection) (medium, CVSS 5.5, published 17 Jun 2026) - [CVE-2026-39568: Elated-Themes Mr. SEO Local File Inclusion](https://junglewise.ai/threats/cve-2026-39568-elated-themes-mr-seo-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39558: Elated-Themes Malmö Local File Inclusion](https://junglewise.ai/threats/cve-2026-39558-elated-themes-malmo-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39557: Elated-Themes NeoBeat PHP object injection](https://junglewise.ai/threats/cve-2026-39557-elated-themes-neobeat-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39554: Elated-Themes Fidalgo PHP Object Injection](https://junglewise.ai/threats/cve-2026-39554-elated-themes-fidalgo-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39549: Elated-Themes Aperitif Local File Inclusion](https://junglewise.ai/threats/cve-2026-39549-elated-themes-aperitif-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39522: Elated-Themes Solene Local File Inclusion](https://junglewise.ai/threats/cve-2026-39522-elated-themes-solene-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39555: Elated-Themes Askka PHP object injection in WordPress theme](https://junglewise.ai/threats/cve-2026-39555-elated-themes-askka-php-object-injection-in-wordpress-theme) (high, CVSS 8.1, published 2 Jun 2026) - [CVE-2026-39551: Elated-Themes Töbel PHP object injection](https://junglewise.ai/threats/cve-2026-39551-elated-themes-tobel-php-object-injection) (high, CVSS 8.1, published 2 Jun 2026) - [CVE-2026-39550: Elated-Themes Aperitif PHP object injection](https://junglewise.ai/threats/cve-2026-39550-elated-themes-aperitif-php-object-injection) (high, CVSS 8.1, published 2 Jun 2026) ## Most severe Elated-Themes vulnerabilities - [CVE-2026-39568: Elated-Themes Mr. SEO Local File Inclusion](https://junglewise.ai/threats/cve-2026-39568-elated-themes-mr-seo-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39549: Elated-Themes Aperitif Local File Inclusion](https://junglewise.ai/threats/cve-2026-39549-elated-themes-aperitif-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39522: Elated-Themes Solene Local File Inclusion](https://junglewise.ai/threats/cve-2026-39522-elated-themes-solene-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39576: Elated-Themes SingleMalt PHP Object Injection](https://junglewise.ai/threats/cve-2026-39576-elated-themes-singlemalt-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39557: Elated-Themes NeoBeat PHP object injection](https://junglewise.ai/threats/cve-2026-39557-elated-themes-neobeat-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39554: Elated-Themes Fidalgo PHP Object Injection](https://junglewise.ai/threats/cve-2026-39554-elated-themes-fidalgo-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39523: Elated-Themes Solene Core unauthenticated local file inclusion](https://junglewise.ai/threats/cve-2026-39523-elated-themes-solene-core-unauthenticated-local-file-inclusion) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-40758: Elated-Themes Léonie PHP Object Injection](https://junglewise.ai/threats/cve-2026-40758-elated-themes-leonie-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-40754: Elated-Themes Roisin PHP Object Injection](https://junglewise.ai/threats/cve-2026-40754-elated-themes-roisin-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) - [CVE-2026-39556: Elated-Themes Konsept PHP Object Injection](https://junglewise.ai/threats/cve-2026-39556-elated-themes-konsept-php-object-injection) (high, CVSS 8.1, published 17 Jun 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 1 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Elated-Themes vulnerabilities", https://junglewise.ai/threats/vendors/elated-themes, 9 November 2026.