Read the docs

aThemeArt

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

aThemeArt records in CISA KEV

No aThemeArt vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-75318 CVE-2026-111413

aThemeArt Theme Helper WordPress plugin cross-site request forgery (CSRF)

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00133 Published 2026-10-16 No fix listed CWE-352
TI-2025-22877 CVE-2025-31740 · GHSA-cp57-26m4-r4m3

WordPress News, Magazine and Blog Elements Plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt News, Magazine and Blog Elements news-magazine-and-blog-elements allows Stored XSS.This issue affects News,…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-01 No fix listed CWE-79
TI-2025-16243 CVE-2025-22339 · GHSA-7442-pm7x-25q8

WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through <= 1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-07 No fix listed CWE-79
Open these records in search →