THEMECO

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

THEMECO records in CISA KEV

No THEMECO vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-36337 CVE-2026-49113 · GHSA-qp4f-jv68-3xrf

WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerability

LOW 39

Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00371 Published 2026-06-16 Fixed in 7.8.8 CWE-94

TI-2026-39089 CVE-2026-54185 · GHSA-w7vq-93h2-r7jj

WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in Cornerstone < 7.8.8 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00332 Published 2026-06-17 Fixed in 7.8.8 CWE-89

TI-2025-39220 CVE-2025-63072 · GHSA-jj2r-52x4-38wx

WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THEMECO Cornerstone cornerstone allows Stored XSS.This issue affects Cornerstone: from n/a through <= 7.7.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00196 Published 2025-12-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0