Curly vulnerabilities | LiveThreat CVE Feed

Product

Curly

by Mikado-Themes · last CVE Jan 22, 2026

CVEs

On KEV

8.1

Max CVSS

New 30D

Severity mix

Critical 0High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Curly to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-67936	8.1	0%	Jan 8	WordPress Curly theme < 3.3 - Local File Inclusion vulnerability Affected: through 3.3
CVE-2026-22393	5.4	0%	Jan 22	WordPress Curly theme <= 3.3 - Insecure Direct Object References (IDOR) vulnerability Affected: through 3.3