Advisories · Technology

Mikado-Themes Mikado Core.

Every CVE that names Mikado-Themes Mikado Core among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-39537 CVE record

CVSS 8.1 High

WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
- Mikado-Themes Mikado Core
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2026-39538 CVE record

CVSS 7.5 High

WordPress Mikado Core plugin <= 1.6 - Local File Inclusion vulnerability
- Mikado-Themes Mikado Core
- File inclusion
Not analysed yet 8 Apr 2026
CVE-2025-9058 CVE record

CVSS 6.4 Medium

Mikado Core <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- Mikado Themes Mikado Core
- Cross-site scripting (XSS)
Not analysed yet 9 Sept 2025