Read the docs

designingmedia

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

designingmedia records in CISA KEV

No designingmedia vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-19886 CVE-2025-27015 · GHSA-2fgp-4w27-wc8x

WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01022 Published 2025-03-26 No fix listed CWE-98
TI-2026-20155 CVE-2026-24970 · GHSA-44cv-6xv4-6x7h

WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects Energox: from n/a through <= 1.2.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-03-25 No fix listed CWE-22
TI-2026-20154 CVE-2026-24969 · GHSA-qh2g-w59g-x32v

WordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue affects Instant VA: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-03-25 No fix listed CWE-22
TI-2025-41558 CVE-2025-67949 · GHSA-rvhq-fp46-ggw3

WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 94.3.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0028 Published 2026-01-22 No fix listed CWE-79
TI-2025-19885 CVE-2025-27014 · GHSA-q6hv-hgwg-f36q

WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 30.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-26 No fix listed CWE-79
TI-2025-14110 CVE-2025-15470 · GHSA-8c4m-vfg9-p3hj

Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion

Priority LOW 29

The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all versions up to, and including, 1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2026-04-14 No fix listed CWE-22
Open these records in search →