Designthemes vulnerabilities

Products

• Knowledge Base 5
• Lms 4
• Wedesigntech Ultimate Booking Addon 4
• Core Features 3
• Insurance 3
• Reservation Plugin 2

Newest

• designthemes knowledge base WordPress Knowledge Base plugin <= 3.2.0 - Broken Access Control vulnerability CVE-2026-108499 5.3 MediumOctober 15, 2026
• designthemes lms WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-78532 7.1 HighOctober 10, 2026
• designthemes whistle - sports club WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-94061 7.1 HighOctober 9, 2026
• designthemes dt lms – elearning, wordpress lms plugin DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions CVE-2026-11355 5.3 MediumSeptember 12, 2026
• designthemes lms WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27404 7.1 HighJuly 2, 2026
• designthemes kids life | children school wordpress WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-27402 7.1 HighJuly 2, 2026
• designthemes fitness zone wordpress theme WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-69155 7.1 HighJuly 2, 2026
• designthemes spalab | beauty salon wordpress theme WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability CVE-2025-69154 7.1 HighJuly 2, 2026
• designthemes trendy travel WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69153 7.1 HighJuly 2, 2026
• designthemes lms elementor pro WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability CVE-2026-27983 9.8 CriticalMarch 5, 2026
• designthemes wedesigntech ultimate booking addon WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability CVE-2026-27390 8.8 HighMarch 5, 2026
• designthemes wedesigntech ultimate booking addon WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability CVE-2026-27389 9.8 CriticalMarch 5, 2026
• designthemes booking manager WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability CVE-2026-27388 7.5 HighMarch 5, 2026
• designthemes directory addon WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability CVE-2026-27386 7.5 HighMarch 5, 2026
• designthemes portfolio WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27385 7.1 HighMarch 5, 2026
• designthemes dental clinic WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability CVE-2026-22473 8.8 HighMarch 5, 2026
• buddhathemes wedesigntech ultimate booking addon WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability CVE-2025-69340 7.5 HighMarch 5, 2026
• designthemes core features WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-69302 7.1 HighFebruary 20, 2026
• designthemes reservation plugin WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability CVE-2025-69095 6.5 MediumJanuary 22, 2026
• designthemes onelife WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability CVE-2025-69002 8.8 HighJanuary 22, 2026
• designthemes vivagh WordPress Vivagh theme <= 2.4 - PHP Object Injection vulnerability CVE-2025-68899 8.8 HighJanuary 22, 2026
• designthemes kids heaven WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability CVE-2025-67619 8.8 HighJanuary 22, 2026
• buddhathemes wedesigntech ultimate booking addon WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability CVE-2025-69341 5.4 MediumJanuary 6, 2026
• designthemes lms addon WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability CVE-2025-68982 5.3 MediumDecember 30, 2025
• designthemes homefix elementor portfolio WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability CVE-2025-68981 5.3 MediumDecember 30, 2025
• designthemes wedesigntech portfolio WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerability CVE-2025-68980 5.3 MediumDecember 30, 2025
• designthemes core WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-68978 6.5 MediumDecember 30, 2025
• designthemes portfolio addon WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-68977 6.5 MediumDecember 30, 2025
• designthemes reservation plugin WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-64221 7.1 HighDecember 18, 2025
• designthemes lms DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation CVE-2025-13542 9.8 CriticalDecember 2, 2025
• designthemes single property WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability CVE-2025-60234 8.8 HighOctober 22, 2025
• designthemes knowledge base WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability CVE-2025-60228 8.8 HighOctober 22, 2025
• designthemes kriya WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability CVE-2025-60215 8.8 HighOctober 22, 2025
• designthemes veda WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability CVE-2025-60212 8.8 HighOctober 22, 2025
• designthemes triss WordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-53423 7.1 HighOctober 22, 2025
• designthemes solar energy WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability CVE-2025-32283 8.8 HighOctober 22, 2025
• designthemes insurance WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerability CVE-2025-31634 8.8 HighOctober 22, 2025
• ajay knowledge base Knowledge Base <= 2.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin Slug CVE-2025-7431 Public exploit 4.4 MediumJuly 18, 2025
• designthemes ofiz - wordpress business consulting theme WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31072 7.1 HighJuly 16, 2025
• designthemes invico - wordpress consulting business theme WordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31427 7.1 HighJuly 16, 2025
• designthemes visual art | gallery wordpress theme WordPress Visual Art | Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerability CVE-2025-31422 8.8 HighJuly 16, 2025
• designthemes red art WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability CVE-2025-52828 8.8 HighJuly 4, 2025
• designthemes lms WordPress LMS theme <= 9.2 - SQL Injection Vulnerability CVE-2025-52833 9.3 CriticalJuly 4, 2025
• designthemes lms WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability CVE-2025-52799 7.1 HighJune 27, 2025
• ajay knowledge base Knowledge Base <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-5533 6.4 MediumJune 6, 2025
• designthemes crafts & arts WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability CVE-2025-31924 8.8 HighMay 23, 2025
• designthemes pet world WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability CVE-2025-32284 8.8 HighMay 23, 2025
• designthemes finance consultant WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability CVE-2025-32293 8.8 HighMay 23, 2025
• designthemes core features DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-0845 6.4 MediumMarch 25, 2025
• designthemes core features DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file CVE-2024-13471 7.5 HighMarch 5, 2025
• Show olderLoading…