Security
فارسی
All products

betheme

WordPress · Theme
25 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Betheme <= 28.5.8 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-94415 betheme WordPress High No fix reported
Betheme <= 28.5.7 - Authenticated (Contributor+) Remote Code ExecutionCVE-2026-65548 betheme WordPress High Fix reported
Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' ShortcodeCVE-2026-6178 betheme WordPress Medium Fix reported
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript LibraryCVE-2024-5647 addons-for-diviblossomthemes-instagram-feed WordPress Medium Fix reported
Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack UploadCVE-2026-6261 betheme WordPress High Fix reported
Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'CVE-2026-6262 betheme WordPress Medium Fix reported
Betheme <= 28.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-63075 betheme WordPress Medium Fix reported
Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'CVE-2025-9371 betheme WordPress Medium Fix reported
Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-7399 betheme WordPress Medium Fix reported
Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-3077 betheme WordPress Medium Fix reported
Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JSCVE-2025-0450 betheme WordPress Medium Fix reported
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object InjectionCVE-2024-2694 betheme WordPress High Fix reported
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG FileCVE-2024-5567 betheme WordPress Medium Fix reported
Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-3998 betheme WordPress Medium No fix reported
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object InjectionCVE-2022-45077 betheme WordPress High Fix reported
Betheme <= 26.6.2 - Missing Authorization Checks to Private Page/Post Data DisclosureCVE-2022-45353 betheme WordPress Medium Fix reported
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object InjectionCVE-2022-3861 betheme WordPress High Fix reported
Betheme <= 26.7.5 - Reflected Cross-Site ScriptingCVE-2023-29101 betheme WordPress Medium Fix reported
Betheme <= 26.6.2 - Missing Authorization Check on Core FunctionalityCVE-2022-45356 betheme WordPress High Fix reported
Betheme <= 26.6.2 - Missing Authorization to Post Status ChangeCVE-2022-45351 betheme WordPress Medium Fix reported