Read the docs

HaruTheme

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

HaruTheme records in CISA KEV

No HaruTheme vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-37585 CVE-2025-60219 · GHSA-wmqf-w969-fg83

WordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro wc-designer-pro allows Upload a Web Shell to a Web Server.This issue affects WooCommerce Designer Pro: from n/a through…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00391 Published 2025-09-26 No fix listed CWE-434
TI-2025-31800 CVE-2025-49885 · GHSA-gv3g-5wrh-3x24

WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme Drag and Drop Multiple File Upload (Pro) - WooCommerce drag-and-drop-file-upload-wc-pro allows Upload a Web Shell to a Web Server.This issue affe…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00408 Published 2025-06-27 No fix listed CWE-434
TI-2025-37531 CVE-2025-60165 · GHSA-67hp-wrc2-hhpq

WordPress Frames Theme <= 1.5.7 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in HaruTheme Frames frames allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frames: from n/a through <= 1.5.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2025-09-26 No fix listed CWE-862
Open these records in search →