Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: designingmedia Clear all filters
TI-2025-14110 CVE-2025-15470 · GHSA-8c4m-vfg9-p3hj

Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion

Priority LOW 29

The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all versions up to, and including, 1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00344 Published 2026-04-14 No fix listed CWE-22
TI-2026-20155 CVE-2026-24970 · GHSA-44cv-6xv4-6x7h

WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects Energox: from n/a through <= 1.2.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-03-25 No fix listed CWE-22
TI-2026-20154 CVE-2026-24969 · GHSA-qh2g-w59g-x32v

WordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue affects Instant VA: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0034 Published 2026-03-25 No fix listed CWE-22
TI-2025-41558 CVE-2025-67949 · GHSA-rvhq-fp46-ggw3

WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 94.3.6.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0028 Published 2026-01-22 No fix listed CWE-79
TI-2025-19885 CVE-2025-27014 · GHSA-q6hv-hgwg-f36q

WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 30.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-03-26 No fix listed CWE-79
TI-2025-19886 CVE-2025-27015 · GHSA-2fgp-4w27-wc8x

WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability

Priority LOW 37

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.01022 Published 2025-03-26 No fix listed CWE-98