Read the docs

desertthemes

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

desertthemes records in CISA KEV

No desertthemes vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2024-37178 CVE-2024-56208 · GHSA-rjh6-2p75-696h

WordPress NewsMash theme <= 1.0.71 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This issue affects NewsMash: from n/a through <= 1.0.71.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00256 Published 2026-02-20 No fix listed CWE-79
TI-2024-10057 CVE-2024-10849 · GHSA-h93p-m64j-76rp

NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The NewsMash theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 1.0.71 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-12-06 No fix listed CWE-79
TI-2024-10056 CVE-2024-10848 · GHSA-87r7-gx2x-86h9

NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The NewsMunch theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 1.0.35 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00261 Published 2024-12-05 No fix listed CWE-79
TI-2025-36470 CVE-2025-58817 · GHSA-c5jg-hqqg-wr3v

WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SoftMe: from n/a through <= 1.1.27.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-09-05 No fix listed CWE-862
Open these records in search →