Skip to content
Sparklewpthemes vulnerabilities
Newest
-
sparklewpthemes fitness fse
WordPress Fitness FSE theme <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-25394
4.3 Medium
-
sparklewpthemes hello fse
WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability
CVE-2026-25393
4.3 Medium
-
sparkle wp construction light
WordPress Construction Light theme <= 1.6.7 - Broken Access Control vulnerability
CVE-2025-62960
5.4 Medium
-
sparkle wp fse, sparklewpthemes sparkle fse +1 more
WordPress Sparkle FSE theme <= 1.0.9 - Broken Access Control vulnerability
CVE-2025-62961
5.4 Medium
-
sparklewpthemes kingcabs
Kingcabs <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter
CVE-2025-7058
6.4 Medium
-
sparkle themes blogger buzz
WordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-54680
6.5 Medium
-
sparklewpthemes appzend
Appzend <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter
CVE-2025-5587
6.4 Medium
-
sparklewpthemes educenter
Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5529
6.4 Medium
-
sparklewpthemes hello fse blog
WordPress Hello FSE Blog theme <= 1.0.6 - Broken Access Control Vulnerability
CVE-2025-49970
4.3 Medium
-
sparkle themes fitness park
WordPress Fitness Park theme <= 1.1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50033
6.5 Medium
-
sparkle themes spark multipurpose
WordPress Spark Multipurpose theme <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-50030
6.5 Medium
-
sparklewpthemes sparkle demo importer
Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import
CVE-2024-6120
6.5 Medium
-
sparkle wp educenter
WordPress Educenter theme <= 1.5.5 - Broken Access Control
CVE-2023-30480
4.3 Medium