Designthemes vulnerabilities
46 CVEs and advisories name Designthemes as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-78532WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-94061WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-11355DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions
- CVE-2026-27404WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-27402WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-69155WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-69154WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-69153WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-27983WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability
- CVE-2026-27390WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability
- CVE-2026-27389WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability
- CVE-2026-27388WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability
- CVE-2026-27386WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability
- CVE-2026-27385WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-22473WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability
- CVE-2025-69302WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-69095WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability
- CVE-2025-69002WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability
- CVE-2025-68899WordPress Vivagh theme <= 2.4 - PHP Object Injection vulnerability
- CVE-2025-67619WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability
- CVE-2025-68982WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability
- CVE-2025-68981WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability
- CVE-2025-68980WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerability
- CVE-2025-68978WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-68977WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64221WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-13542DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation
- CVE-2025-60234WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability
- CVE-2025-60228WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability
- CVE-2025-60215WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability