Threat database

43 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.3%	CVE-2025-68982DesignThemes LMS Addon · Missing Authorization Medium5.3EPSS 0.3%2025-12-30CVE Database V5CVE-2025-68982 Missing Authorization vulnerability in designthemes DesignThemes LMS Addon designthemes-lms-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes LMS Addon: from n/a through <= 2.6. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-12-30
Medium	5.3	EPSS 0.3%	CVE-2025-68981HomeFix Elementor Portfolio · Missing Authorization Medium5.3EPSS 0.3%2025-12-30CVE Database V5CVE-2025-68981 Missing Authorization vulnerability in designthemes HomeFix Elementor Portfolio homefix-ele-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HomeFix Elementor Portfolio: from n/a through <= 1.0.1. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-12-30
Medium	5.3	EPSS 0.3%	CVE-2025-68980WeDesignTech Portfolio · Missing Authorization Medium5.3EPSS 0.3%2025-12-30CVE Database V5CVE-2025-68980 Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through <= 1.0.2. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-12-30
Medium	6.5	EPSS 0.2%	CVE-2025-68978DesignThemes Core · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-68978 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Core designthemes-core allows DOM-Based XSS.This issue affects DesignThemes Core: from n/a through <= 1.6. EPSS 0.2%Vulnerability designthemes	CVE Database V5	2025-12-30
Medium	6.5	EPSS 0.2%	CVE-2025-68977DesignThemes Portfolio Addon · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… Medium6.5EPSS 0.2%2025-12-30CVE Database V5CVE-2025-68977 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Portfolio Addon designthemes-portfolio-addon allows DOM-Based XSS.This issue affects DesignThemes Portfolio Addon: from n/a through <= 1.5. EPSS 0.2%Vulnerability designthemes	CVE Database V5	2025-12-30
High	7.1	EPSS 0.2%	CVE-2025-64221Reservation Plugin · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… High7.1EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64221 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Reservation Plugin dt-reservation-plugin allows Reflected XSS.This issue affects Reservation Plugin: from n/a through <= 1.6. EPSS 0.2%Vulnerability designthemes	CVE Database V5	2025-12-18
Critical	9.8	EPSS 0.4%	CVE-2025-13542DesignThemes LMS · Improper Privilege Management Critical9.8EPSS 0.4%2025-12-02CVE Database V5CVE-2025-13542 The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4. This is due to the 'dtlms_register_user_front_end' function not restricting what user roles a user can register with. This makes it possible for unauthenticated attackers to supply the 'administrator' role during registration and gain administrator access to the site. EPSS 0.4%Vulnerability DesignThemes #cwe-269	CVE Database V5	2025-12-02
High	8.8	EPSS 0.5%	CVE-2025-60234Single Property · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-10-22CVE Database V5CVE-2025-60234 Deserialization of Untrusted Data vulnerability in designthemes Single Property single-property allows Object Injection.This issue affects Single Property: from n/a through <= 2.8. EPSS 0.5%Vulnerability designthemes	CVE Database V5	2025-10-22
High	8.8	EPSS 0.5%	CVE-2025-60228Knowledge Base · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-10-22CVE Database V5CVE-2025-60228 Deserialization of Untrusted Data vulnerability in designthemes Knowledge Base kbase allows Object Injection.This issue affects Knowledge Base: from n/a through <= 2.9. EPSS 0.5%Vulnerability designthemes	CVE Database V5	2025-10-22
High	8.8	EPSS 0.5%	CVE-2025-60215Kriya · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-10-22CVE Database V5CVE-2025-60215 Deserialization of Untrusted Data vulnerability in designthemes Kriya kriya allows Object Injection.This issue affects Kriya: from n/a through <= 3.4. EPSS 0.5%Vulnerability designthemes	CVE Database V5	2025-10-22
High	8.8	EPSS 0.5%	CVE-2025-60212VEDA · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-10-22CVE Database V5CVE-2025-60212 Deserialization of Untrusted Data vulnerability in designthemes VEDA veda allows Object Injection.This issue affects VEDA: from n/a through <= 4.2. EPSS 0.5%Vulnerability designthemes	CVE Database V5	2025-10-22
High	7.1	EPSS 0.3%	CVE-2025-53423Triss · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-53423 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Triss triss allows Reflected XSS.This issue affects Triss: from n/a through <= 2.6. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-10-22
High	8.8	EPSS 0.6%	CVE-2025-32283Solar Energy · Deserialization of Untrusted Data High8.8EPSS 0.6%2025-10-22CVE Database V5CVE-2025-32283 Deserialization of Untrusted Data vulnerability in designthemes Solar Energy solar allows Object Injection.This issue affects Solar Energy: from n/a through <= 3.5. EPSS 0.6%Vulnerability designthemes	CVE Database V5	2025-10-22
High	8.8	EPSS 0.6%	CVE-2025-31634Insurance · Deserialization of Untrusted Data High8.8EPSS 0.6%2025-10-22CVE Database V5CVE-2025-31634 Deserialization of Untrusted Data vulnerability in designthemes Insurance insurance allows Object Injection.This issue affects Insurance: from n/a through <= 3.5. EPSS 0.6%Vulnerability designthemes	CVE Database V5	2025-10-22
High	7.1	EPSS 0.3%	CVE-2025-31072Ofiz - WordPress Business Consulting Theme · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… High7.1EPSS 0.3%2025-07-16CVE Database V5CVE-2025-31072 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Ofiz - WordPress Business Consulting Theme ofiz allows Reflected XSS.This issue affects Ofiz - WordPress Business Consulting Theme: from n/a through <= 2.0. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-07-16
High	8.8	EPSS 0.5%	CVE-2025-31422Visual Art \| Gallery WordPress Theme · Deserialization of Untrusted Data High8.8EPSS 0.5%2025-07-16CVE Database V5CVE-2025-31422 Deserialization of Untrusted Data vulnerability in designthemes Visual Art \| Gallery WordPress Theme visual-arts allows Object Injection.This issue affects Visual Art \| Gallery WordPress Theme: from n/a through <= 2.4. EPSS 0.5%Vulnerability designthemes	CVE Database V5	2025-07-16
High	7.1	EPSS 0.3%	CVE-2025-31427Invico - WordPress Consulting Business Theme · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in designthemes… High7.1EPSS 0.3%2025-07-16CVE Database V5CVE-2025-31427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes Invico - WordPress Consulting Business Theme invico allows Reflected XSS.This issue affects Invico - WordPress Consulting Business Theme: from n/a through <= 1.9. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-07-16
High	8.8	EPSS 0.4%	CVE-2025-52828Red Art · Deserialization of Untrusted Data High8.8EPSS 0.4%2025-07-04CVE Database V5CVE-2025-52828 Deserialization of Untrusted Data vulnerability in designthemes Red Art redart allows Object Injection.This issue affects Red Art: from n/a through <= 3.8. EPSS 0.4%Vulnerability designthemes	CVE Database V5	2025-07-04
Critical	9.3	EPSS 0.3%	CVE-2025-52833LMS · SQL Injection Critical9.3EPSS 0.3%2025-07-04CVE Database V5CVE-2025-52833 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS lms allows SQL Injection.This issue affects LMS: from n/a through <= 9.2. EPSS 0.3%Vulnerability designthemes	CVE Database V5	2025-07-04
High	7.1	EPSS 0.2%	CVE-2025-52799LMS · Cross-site Scripting High7.1EPSS 0.2%2025-06-27CVE Database V5CVE-2025-52799 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes LMS lms allows Reflected XSS.This issue affects LMS: from n/a through <= 9.2. EPSS 0.2%Vulnerability designthemes	CVE Database V5	2025-06-27

Showing 21–40 of 43 results