TI-2025-42592 CVE-2025-69138 · GHSA-m7fj-q375-5wr5
WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
Vulnerabilities
13 records
TI-2025-42591 CVE-2025-69137 · GHSA-m576-7v25-2j8r
WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerability
Priority LOW 29
Subscriber Broken Access Control in Genemy <= 1.6.6 versions.
TI-2025-32797 CVE-2025-52747 · GHSA-c7x5-qpfw-5h38
WordPress Themebox - Digital Products Ecommerce theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Reflected XSS.
TI-2025-42836 CVE-2025-69393 · GHSA-qqj5-wp73-78fr
WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability
Priority LOW 39
Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4.
TI-2025-42773 CVE-2025-69330 · GHSA-57vf-72qj-2828
WordPress Prestige theme < 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Prestige prestige allows Reflected XSS.This issue affects Prestige: from n/a through < 1.4.1.
TI-2025-42772 CVE-2025-69329 · GHSA-p69v-gqh4-hg9p
WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1.
TI-2025-33847 CVE-2025-54002 · GHSA-m3hc-cvmh-fj5g
WordPress xSmart theme <= 1.2.9.4 - Broken Access Control vulnerability
Priority LOW 31
Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through <= 1.2.9.4.
TI-2025-31920 CVE-2025-50007 · GHSA-847h-pfgv-f8c6
WordPress xSmart theme <= 1.2.9.4 - Privilege Escalation vulnerability
Priority MEDIUM 41
Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through <= 1.2.9.4.
TI-2025-31919 CVE-2025-50006 · GHSA-fx32-vc85-q9x8
WordPress xSmart theme <= 1.2.9.4 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through <= 1.2.9.4.
TI-2025-36743 CVE-2025-59138 · GHSA-wwch-wq4r-qh4w
WordPress Genemy theme <= 1.6.6 - Server Side Request Forgery (SSRF) vulnerability
Priority LOW 22
Server-Side Request Forgery (SSRF) vulnerability in Jthemes Genemy genemy allows Server Side Request Forgery.This issue affects Genemy: from n/a through <= 1.6.6.
TI-2025-36739 CVE-2025-59134 · GHSA-97qf-cpwx-q6fw
WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme…
Priority MEDIUM 40
Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services…
TI-2025-36048 CVE-2025-58243 · GHSA-qmvr-vqwv-566v
WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability
Priority LOW 30
Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through <= 3.4.0.
TI-2025-39084 CVE-2025-62936 · GHSA-m24f-6c22-rr63
WordPress xSmart theme <= 1.2.9.4 - Content Injection vulnerability
Priority LOW 20
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through <= 1.2.9.4.