Jthemes vulnerabilities and threats

13 threats

Severity	CVSS	Signals	Threat	Source	Published
High	8.8	EPSS 0.4%	CVE-2025-69138Genemy (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.4%2026-06-17CVE Database V5CVE-2025-69138 Subscriber Privilege Escalation in Genemy <= 1.6.6 versions. EPSS 0.4%Vulnerability Jthemes CWE-266	CVE Database V5	2026-06-17
Medium	6.5	EPSS 0.3%	CVE-2025-69137Genemy (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-06-16CVE Database V5CVE-2025-69137 Subscriber Broken Access Control in Genemy <= 1.6.6 versions. EPSS 0.3%Vulnerability Jthemes CWE-862	CVE Database V5	2026-06-16
High	7.1	EPSS 0.2%	CVE-2025-52747Themebox (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-05-27CVE Database V5CVE-2025-52747 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Reflected XSS. This issue affects Themebox - Digital Products Ecommerce: from n/a through 1.4.2. EPSS 0.2%Vulnerability Jthemes CWE-79	CVE Database V5	2026-05-27
High	7.5	EPSS 0.3%	CVE-2025-69393Exzo (WordPress plugin) · Missing Authorization High7.5EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69393 Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2026-02-20
High	7.1	EPSS 0.2%	CVE-2025-69330Prestige (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-02-20CVE Database V5CVE-2025-69330 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Prestige prestige allows Reflected XSS.This issue affects Prestige: from n/a through < 1.4.1. EPSS 0.2%Vulnerability Jthemes	CVE Database V5	2026-02-20
Critical	9.8	EPSS 0.4%	CVE-2025-69329Prestige (WordPress plugin) · Deserialization of Untrusted Data Critical9.8EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69329 Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1. EPSS 0.4%Vulnerability Jthemes	CVE Database V5	2026-02-20
Medium	6.5	EPSS 0.3%	CVE-2025-54002xSmart (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.3%2026-01-22CVE Database V5CVE-2025-54002 Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through <= 1.2.9.4. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2026-01-22
High	8.8	EPSS 0.5%	CVE-2025-50007xSmart (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.5%2026-01-22CVE Database V5CVE-2025-50007 Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through <= 1.2.9.4. EPSS 0.5%Vulnerability Jthemes	CVE Database V5	2026-01-22
High	7.1	EPSS 0.3%	CVE-2025-50006xSmart (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-01-22CVE Database V5CVE-2025-50006 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through <= 1.2.9.4. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2026-01-22
Medium	4.9	EPSS 0.2%	CVE-2025-59138Genemy (WordPress plugin) · Server-Side Request Forgery (SSRF) Medium4.9EPSS 0.2%2025-12-31CVE Database V5CVE-2025-59138 Server-Side Request Forgery (SSRF) vulnerability in Jthemes Genemy genemy allows Server Side Request Forgery.This issue affects Genemy: from n/a through <= 1.6.6. EPSS 0.2%Vulnerability Jthemes	CVE Database V5	2025-12-31
High	8.8	EPSS 0.3%	CVE-2025-59134Sale! Immigration law, Visa services support, Migration Agent Consulting (WordPress plugin) · Incorrect Privilege Assignment High8.8EPSS 0.3%2025-12-18CVE Database V5CVE-2025-59134 Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through <= 1.5.8. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2025-12-18
Medium	5.3	EPSS 0.3%	CVE-2025-58243imEvent (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-11-06CVE Database V5CVE-2025-58243 Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from n/a through <= 3.4.0. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2025-11-06
Medium	4.3	EPSS 0.3%	CVE-2025-62936xSmart (WordPress plugin) · Basic XSS Medium4.3EPSS 0.3%2025-10-27CVE Database V5CVE-2025-62936 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through <= 1.2.9.4. EPSS 0.3%Vulnerability Jthemes	CVE Database V5	2025-10-27

Page 1 of 1