Read the docs

themebeez

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

themebeez records in CISA KEV

No themebeez vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Orchid Store 1 record LOW

Records

10 records

TI-2023-13205 CVE-2023-28687 · GHSA-89j2-4p5x-93v7

Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in perfectwpthemes Glaze Blog Lite, themebeez Fascinate, themebeez Cream Blog, themebeez Cream Magazine allows Reflected…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00467 Published 2024-03-26 No fix listed CWE-79
TI-2026-41601 CVE-2026-57779 · GHSA-wwgx-g3xj-467p

WordPress Fascinate theme <= 1.1.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in themebeez Fascinate fascinate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Fascinate: from n/a through <= 1.1.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-07-13 No fix listed CWE-862
TI-2026-19843 CVE-2026-24604 · GHSA-q8q5-439x-8gjf

WordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in themebeez Simple GDPR Cookie Compliance simple-gdpr-cookie-compliance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple GDPR Cookie C…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2026-01-23 No fix listed CWE-862
TI-2026-19842 CVE-2026-24603 · GHSA-qch8-5fwf-788h

WordPress Universal Google Adsense and Ads manager plugin <= 1.1.8 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in themebeez Universal Google Adsense and Ads manager universal-google-adsense-and-ads-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00301 Published 2026-01-23 No fix listed CWE-862
TI-2025-42465 CVE-2025-69010 · GHSA-m92c-6fmm-wcmf

WordPress Themebeez Toolkit plugin <= 1.3.5 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in themebeez Themebeez Toolkit themebeez-toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Themebeez Toolkit: from n/a through <= 1.3.5…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00254 Published 2025-12-30 No fix listed CWE-862
TI-2026-28620 CVE-2026-39649 · GHSA-9hr8-hx97-625q

WordPress Royale News theme <= 2.2.4 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in themebeez Royale News royale-news allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Royale News: from n/a through <= 2.2.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00222 Published 2026-04-08 No fix listed CWE-862
TI-2026-28619 CVE-2026-39648 · GHSA-j9hx-3gqc-82f3

WordPress Cream Blog theme <= 2.1.7 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in themebeez Cream Blog cream-blog allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Blog: from n/a through <= 2.1.7.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00198 Published 2026-04-08 No fix listed CWE-862
TI-2026-19854 CVE-2026-24615 · GHSA-9g3h-4xrc-w4fr

WordPress Cream Magazine theme <= 2.1.10 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in themebeez Cream Magazine cream-magazine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cream Magazine: from n/a through <= 2.1.10.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2026-01-23 No fix listed CWE-862
TI-2026-19851 CVE-2026-24612 · GHSA-rvh8-2vj5-4q37

WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in themebeez Orchid Store orchid-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Orchid Store: from n/a through <= 1.5.15.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00209 Published 2026-01-23 No fix listed CWE-862
TI-2024-06485 CVE-2024-6987 · GHSA-553f-xfwg-wrqr

Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation

Priority LOW 20

The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchid_store_activate_plugin' function in all versions up to, and including, 1.5.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-08-08 No fix listed CWE-862
Open these records in search →