Themeton vulnerabilities

Products

• Spare 3
• Acerola 2
• Dash 2
• Hotstar – Multi-purpose Business Theme 2
• Seven Stars 2
• The Business 2

Newest

• themeton the barber shop WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability CVE-2025-60230 9.8 CriticalJune 17, 2026
• themeton lagom WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability CVE-2025-60229 9.8 CriticalJune 17, 2026
• themeton finag WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability CVE-2025-60237 9.8 CriticalMarch 19, 2026
• themeton zuut WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerability CVE-2025-60233 9.8 CriticalMarch 19, 2026
• themeton consult aid WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability CVE-2025-67617 9.8 CriticalJanuary 22, 2026
• themeton seven stars WordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31067 7.1 HighJune 27, 2025
• themeton spare WordPress Spare <= 1.7 - PHP Object Injection Vulnerability CVE-2025-31919 9.8 CriticalJune 17, 2025
• themeton the fashion - model agency one page beauty theme WordPress The Fashion - Model Agency One Page Beauty Theme plugin <= 1.4.4 - Deserialization of untrusted data Vulnerability CVE-2025-31052 9.8 CriticalJune 9, 2025
• themeton pimp - creative multipurpose WordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data Vulnerability CVE-2025-31398 9.8 CriticalJune 9, 2025
• themeton flap - business wordpress theme WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability CVE-2025-31396 9.8 CriticalJune 9, 2025
• themeton pressgrid - frontend publish reaction & multimedia theme WordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data Vulnerability CVE-2025-31429 9.8 CriticalJune 9, 2025
• themeton spare WordPress Spare <= 1.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-31638 7.1 HighJune 9, 2025
• themeton dash WordPress Dash <= 1.3 - PHP Object Injection Vulnerability CVE-2025-31049 9.8 CriticalMay 23, 2025
• themeton hotstar – multi-purpose business theme WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability CVE-2025-31069 9.8 CriticalMay 23, 2025
• themeton the business WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability CVE-2025-31430 9.8 CriticalMay 23, 2025
• themeton acerola WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability CVE-2025-31927 9.8 CriticalMay 23, 2025
• themeton rozario WordPress Rozario <= 1.4 - Broken Access Control Vulnerability CVE-2025-31065 5.3 MediumMay 16, 2025
• themeton seven stars WordPress Seven Stars <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-31068 4.3 MediumMay 16, 2025
• themeton acerola WordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability CVE-2025-31066 5.3 MediumMay 16, 2025
• themeton the business WordPress The Business <= 1.6.1 - Broken Access Control Vulnerability CVE-2025-31630 5.3 MediumMay 16, 2025
• themeton hotstar – multi-purpose business theme WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control Vulnerability CVE-2025-31071 5.3 MediumMay 16, 2025
• themeton spare WordPress Spare <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-31639 4.3 MediumMay 16, 2025
• plotly dash Dash apps vulnerable to Cross-site Scripting CVE-2024-21485 Fix available 6.5 MediumFebruary 2, 2024