Designthemes vulnerabilities
46 CVEs and advisories name Designthemes as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-60212WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability
- CVE-2025-53423WordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-32283WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability
- CVE-2025-31634WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerability
- CVE-2025-31072WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-31422WordPress Visual Art | Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerability
- CVE-2025-31427WordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-52828WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability
- CVE-2025-52833WordPress LMS theme <= 9.2 - SQL Injection Vulnerability
- CVE-2025-52799WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability
- CVE-2025-31924WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability
- CVE-2025-32284WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability
- CVE-2025-32293WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability
- CVE-2025-0845DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2024-13471DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file
- CVE-2024-13787VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection