uixthemes vulnerabilities and threats

4 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-25033Motta Addons (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-25033 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uixthemes Motta Addons motta-addons allows Reflected XSS.This issue affects Motta Addons: from n/a through < 1.6.1. EPSS 0.2%Vulnerability uixthemes	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.4%	CVE-2025-67547Konte (WordPress plugin) · Missing Authorization Medium6.5EPSS 0.4%2026-02-20CVE Database V5CVE-2025-67547 Missing Authorization vulnerability in uixthemes Konte konte allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Konte: from n/a through <= 2.4.6. EPSS 0.4%Vulnerability uixthemes	CVE Database V5	2026-02-20
Medium	4.3	EPSS 0.2%	CVE-2026-25459Sober (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-25459 Missing Authorization vulnerability in uixthemes Sober sober allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sober: from n/a through <= 3.5.12. EPSS 0.2%Vulnerability uixthemes	CVE Database V5	2026-02-19
Medium	5.3	EPSS 0.3%	CVE-2025-67567Sober (WordPress plugin) · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-67567 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in uixthemes Sober sober allows Retrieve Embedded Sensitive Data.This issue affects Sober: from n/a through <= 3.5.11. EPSS 0.3%Vulnerability uixthemes CWE-497	CVE Database V5	2025-12-09

Page 1 of 1