Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: BuddhaThemes Clear all filters
TI-2026-70014 CVE-2026-94065 · GHSA-g7x9-vgq3-cr7j

PHP object injection in WordPress ColorFolio theme

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00279 Published 2026-10-09 No fix listed CWE-502
TI-2026-70013 CVE-2026-94064 · GHSA-c64r-rv52-45v4

Neo | Barber Shop WordPress Theme PHP Object Injection via neocut

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00279 Published 2026-10-09 No fix listed CWE-502
TI-2026-21555 CVE-2026-27096 · GHSA-v3h3-r67m-6xv9

WordPress ColorFolio - Freelance Designer WordPress Theme theme <= 1.3 - Deserialization of untrusted data vulnerability

Priority LOW 37

Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance Designer WordPress Theme: from n/a through…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00326 Published 2026-03-19 No fix listed CWE-502
TI-2025-42783 CVE-2025-69340 · GHSA-gxv7-fxxc-7j3f

WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDes…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00473 Published 2026-03-05 No fix listed CWE-862
TI-2025-12393 CVE-2025-13563 · GHSA-vjww-2j24-c357

Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Escalation

Priority MEDIUM 49

The Lizza LMS Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00414 Published 2026-02-19 No fix listed CWE-269
TI-2025-42784 CVE-2025-69341 · GHSA-qxwx-wvwc-842x

WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDes…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00202 Published 2026-01-06 No fix listed CWE-862