Vulnerabilidades en designthemes

44 resultados
Análisis Vexday

A DesignThemes acumula 39 vulnerabilidades catalogadas, com 4 delas críticas (CVSS alto), mas nenhuma sob exploração ativa confirmada até o momento. A fraqueza predominante é CWE-502 (deserialização não segura), um padrão estrutural que sugere problemas arquiteturais; apenas 2 novas vulnerabilidades surgiram nos últimos 90 dias, indicando risco moderado e não imediato.

CVE-2025-52828HIGHWordPress Red Art theme <= 3.8 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2026-27983CRITICALWordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-69095MEDIUMWordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerabilityEPSS 0.3%CVE-2025-52833CRITICALWordPress LMS theme <= 9.2 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-27404HIGHWordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69154HIGHWordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69155HIGHWordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-27402HIGHWordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69153HIGHWordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-68980MEDIUMWordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68982MEDIUMWordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68981MEDIUMWordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-27386HIGHWordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-11355MEDIUMDT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX ActionsEPSS 0.2%CVE-2025-31427HIGHWordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-31072HIGHWordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53423HIGHWordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-0845MEDIUMDesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2025-64221HIGHWordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68978MEDIUMWordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%