Vulnerabilidades en themeton

22 resultados
Análisis Vexday

Themeton apresenta um acervo moderado de 18 vulnerabilidades, com 10 classificadas como críticas, porém nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é desserialização insegura (CWE-502), típica de bibliotecas de processamento de dados, que representa risco significativo em ambientes onde o fornecedor processa entrada não confiável. A ausência de publicações recentes (últimos 90 dias) sugere que a base de vulnerabilidades é estabelecida e não há indicação de novos problemas em fase de disclosure.

CVE-2025-31049CRITICALWordPress Dash <= 1.3 - PHP Object Injection VulnerabilityEPSS 0.6%CVE-2025-31927CRITICALWordPress Acerola <= 1.6.5 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-31069CRITICALWordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-31430CRITICALWordPress The Business <= 1.6.1 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-67617CRITICALWordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-60237CRITICALWordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-31396CRITICALWordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-31429CRITICALWordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data VulnerabilityEPSS 0.5%CVE-2025-31398CRITICALWordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data VulnerabilityEPSS 0.5%CVE-2025-31052CRITICALWordPress The Fashion - Model Agency One Page Beauty Theme plugin <= 1.4.4 - Deserialization of untrusted data VulnerabilityEPSS 0.5%CVE-2025-31919CRITICALWordPress Spare <= 1.7 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2025-60230CRITICALWordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-60229CRITICALWordPress Lagom theme <= 2.0 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-31066MEDIUMWordPress Acerola theme <= 1.6.5 - Broken Access Control VulnerabilityEPSS 0.4%CVE-2025-60233CRITICALWordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerabilityEPSS 0.4%CVE-2025-31630MEDIUMWordPress The Business <= 1.6.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-31065MEDIUMWordPress Rozario <= 1.4 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-31071MEDIUMWordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-31638HIGHWordPress Spare <= 1.7 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-31067HIGHWordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%