Read the docs

themebon

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

themebon records in CISA KEV

No themebon vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Digital Marketing And Agency Templates Addons For Elementor 1 record LOW

Records

5 records

TI-2025-42833 CVE-2025-69390 · GHSA-279c-6crv-5wxc

Cross-site scripting in themebon Business Template Blocks for WPBakery Page Builder

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Business Template Blocks for WPBakery (Visual Composer) Page Builder templates-and-addons-for-wpbakery-page-b…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00208 Published 2026-02-20 No fix listed CWE-79
TI-2025-36649 CVE-2025-59006 · GHSA-qwqf-r42p-wxrq

WordPress Easy Woocommerce Customizer plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Easy Woocommerce Customizer easy-woocommerce-customizer allows Reflected XSS.This issue affects Easy Woocomme…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00235 Published 2025-10-22 No fix listed CWE-79
TI-2025-16471 CVE-2025-22585 · GHSA-86xp-9w89-4h5q

WordPress Ultimate Image Hover Effects plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themebon Ultimate Image Hover Effects ultimate-image-hover-effects allows DOM-Based XSS.This issue affects Ultimate Im…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-07 No fix listed CWE-79
TI-2025-12901 CVE-2025-14119 · GHSA-959g-cxh7-672v

Cross-site scripting in themebon App Landing Template Blocks for WPBakery Page Builder

Priority LOW 28

The App Landing Template Blocks for WPBakery (Visual Composer) Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'atvc_video_play' shortcode in all versions up to, and including, 2.0.…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00216 Published 2025-12-12 No fix listed CWE-79
Open these records in search →