Read the docs

modeltheme

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

modeltheme records in CISA KEV

No modeltheme vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-42052 CVE-2025-68531 · GHSA-29xg-2j5g-mj8g

WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects ModelTheme Addons for WPBakery and Elem…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2026-02-20 No fix listed CWE-502
TI-2025-42746 CVE-2025-69303 · GHSA-62mp-mc96-vv2w

WordPress ModelTheme Framework plugin < 2.0.0 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ModelTheme Framework: from n/a throug…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00323 Published 2026-02-20 No fix listed CWE-862
TI-2025-42053 CVE-2025-68532 · GHSA-rrq9-36f5-3j9c

WordPress ModelTheme Addons for WPBakery and Elementor plugin < 1.5.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Stored XSS.This issue af…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-12-24 No fix listed CWE-79
Open these records in search →