Vulnerabilities in jwsthemes

9 results

Vexday analysis

JWSThemes apresenta um portfólio reduzido de 9 CVEs com apenas 1 crítica registrada e nenhuma sob exploração ativa conhecida, indicando risco contido no curto prazo. A fraqueza dominante é CWE-98 (Uso Impróprio de Referência de Arquivo), e a publicação recente de 2 vulnerabilidades nos últimos 90 dias sugere atividade contínua de descoberta, exigindo monitoramento de patches disponibilizados pelo fornecedor.

CVE-2025-12550HIGHWordPress OchaHouse theme <= 2.2.8 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2026-42380CRITICALWordPress AI Lab theme < 5.4.2 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2026-25381HIGHWordPress LoveDate theme < 3.8.6 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-25382HIGHWordPress IdealAuto theme < 3.8.6 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-25380HIGHWordPress Feedy theme < 2.1.5 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-25379HIGHWordPress StreamVid theme < 6.8.6 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-57789HIGHWordPress Aqua theme <= 5.1.2 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2025-69087HIGHWordPress FreeAgent theme <= 2.1.2 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-69086HIGHWordPress Issabella theme <= 1.1.2 - Local File Inclusion vulnerabilityEPSS 0.3%