← WordPress Vulnerabilities
WordPress security by component

Corpkit

Corpkit is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jul 02, 2026; the highest CVE/CNA score is 9.9.

Theme slug: corpkit

CVE-2025-69132: Corpkit: A security weakness

Corpkit is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.5.

PublishedJul 02, 2026
Known safe version> 1.0.5
Safe version
Jul 02, 2026 CVE-2025-69132
Corpkit: A security weakness
Corpkit is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.5.
> 1.0.5
CVE6.5
NVDPending
Jan 08, 2026 CVE-2025-67925
Corpkit: Filesystem traversal
Corpkit is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.5
NVDPending
Jan 08, 2026 CVE-2025-67924
Corpkit: Dangerous file upload
Corpkit is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE9.9
NVDPending