Vulnerabilidades em DesignThemes

44 resultados
Análise Vexday

DesignThemes apresenta perfil de risco reduzido com apenas 1 CVE catalogado na base, sem registros de exploração ativa em campo. A vulnerabilidade identificada é crítica (CVSS alto) e relacionada a controle de permissões inadequado (CWE-269), porém não foi publicada recentemente, sugerindo que não representa ameaça emergente.

CVE-2025-52828HIGHWordPress Red Art theme <= 3.8 - PHP Object Injection VulnerabilityEPSS 0.4%CVE-2026-27983CRITICALWordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-69095MEDIUMWordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerabilityEPSS 0.3%CVE-2025-52833CRITICALWordPress LMS theme <= 9.2 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-27404HIGHWordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69154HIGHWordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69155HIGHWordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-27402HIGHWordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-69153HIGHWordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-68980MEDIUMWordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68982MEDIUMWordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-68981MEDIUMWordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-27386HIGHWordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-11355MEDIUMDT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX ActionsEPSS 0.2%CVE-2025-31427HIGHWordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-31072HIGHWordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53423HIGHWordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-0845MEDIUMDesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.2%CVE-2025-64221HIGHWordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68978MEDIUMWordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%