diff --git a/data/theme_vulns.xml b/data/theme_vulns.xml
index c7e5ac8c..53077e3c 100644
--- a/data/theme_vulns.xml
+++ b/data/theme_vulns.xml
@@ -1875,4 +1875,15 @@
     </vulnerability>
   </theme>
 
+  <theme name="curvo">
+    <vulnerability>
+      <title>Curvo - wp-content/themes/curvo/functions/upload-handler.php File Upload CSRF</title>
+      <references>
+        <osvdb>99043</osvdb>
+        <url>http://packetstormsecurity.com/files/123799/</url>
+      </references>
+      <type>CSRF</type>
+    </vulnerability>
+  </theme>
+
 </vulnerabilities>