Read the docs

Jthemes

Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

Jthemes records in CISA KEV

No Jthemes vulnerabilities are listed in CISA KEV.

Records

13 records

TI-2025-42772 CVE-2025-69329 · GHSA-p69v-gqh4-hg9p

WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00446 Published 2026-02-20 No fix listed CWE-502
TI-2025-31920 CVE-2025-50007 · GHSA-847h-pfgv-f8c6

WordPress xSmart theme <= 1.2.9.4 - Privilege Escalation vulnerability

Priority MEDIUM 41

Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through <= 1.2.9.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00502 Published 2026-01-22 No fix listed CWE-266
TI-2025-36739 CVE-2025-59134 · GHSA-97qf-cpwx-q6fw

WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme…

Priority MEDIUM 40

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0034 Published 2025-12-18 No fix listed CWE-266
TI-2025-42836 CVE-2025-69393 · GHSA-qqj5-wp73-78fr

WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00333 Published 2026-02-20 No fix listed CWE-862
TI-2025-33847 CVE-2025-54002 · GHSA-m3hc-cvmh-fj5g

WordPress xSmart theme <= 1.2.9.4 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through <= 1.2.9.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00332 Published 2026-01-22 No fix listed CWE-862
TI-2025-36048 CVE-2025-58243 · GHSA-qmvr-vqwv-566v

WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability

Priority LOW 30

Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through <= 3.4.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00265 Published 2025-11-06 No fix listed CWE-862
TI-2025-39084 CVE-2025-62936 · GHSA-m24f-6c22-rr63

WordPress xSmart theme <= 1.2.9.4 - Content Injection vulnerability

Priority LOW 20

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through <= 1.2.9.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2025-10-27 No fix listed CWE-80
Open these records in search →