Athemes Sydney vulnerabilities

• athemes sydney Sydney <= 2.56 - Missing Authorization to Authenticated (Subscriber+) Limited Theme Options Update CVE-2025-8999 5.3 MediumSeptember 17, 2025
• athemes sydney toolbox Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget CVE-2024-4473 6.4 MediumMay 14, 2024
• athemes sydney toolbox Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4036 6.4 MediumMay 2, 2024
• athemes sydney toolbox Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery CVE-2024-3208 6.4 MediumApril 9, 2024
• athemes sydney toolbox Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id CVE-2024-2936 6.4 MediumMarch 29, 2024
• athemes sydney toolbox Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1447 6.4 MediumFebruary 20, 2024