Read the docs

themezaa

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

themezaa records in CISA KEV

No themezaa vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-31794 CVE-2025-49879 · GHSA-37g4-2454-w65h

WordPress Litho theme <= 3.0 - Arbitrary File Deletion Vulnerability

Priority LOW 38

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in themezaa Litho litho allows Path Traversal.This issue affects Litho: from n/a through <= 3.0.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00471 Published 2025-06-17 No fix listed CWE-22
TI-2025-39147 CVE-2025-62999 · GHSA-jprr-5wvh-3rxj

WordPress Litho Addons plugin <= 3.5 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in themezaa Litho Addons litho-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Litho Addons: from n/a through <= 3.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00248 Published 2025-12-09 No fix listed CWE-862
Open these records in search →