ThemeSphere

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

ThemeSphere records in CISA KEV

No ThemeSphere vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Smartmag 1 record LOW

Records

3 records

TI-2024-25236 CVE-2024-37930 · GHSA-253q-prr2-4prx

WordPress SmartMag theme < 10.1.0 - Sensitive Data Exposure via Log File vulnerability

LOW 39

Insertion of Sensitive Information into Log File vulnerability in ThemeSphere SmartMag smartmag-responsive-retina-wordpress-magazine.This issue affects SmartMag: from n/a through < 10.1.0.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00368 Published 2024-08-12 No fix listed CWE-532

TI-2025-39659 CVE-2025-64216 · GHSA-698r-29g4-5vv6

WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability

LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00387 Published 2025-10-29 No fix listed CWE-98

TI-2025-39647 CVE-2025-64204 · GHSA-9pc6-xgvc-2w25

WordPress SmartMag theme <= 10.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeSphere SmartMag smart-mag allows Stored XSS.This issue affects SmartMag: from n/a through <= 10.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0