designthemes

Top products

The 15 most recently published vulnerabilities affecting designthemes.

• CVE-2026-27404WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2026-27402WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2025-69155WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2025-69154WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2025-69153WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jul 2, 2026
• CVE-2026-27983WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability9.8Mar 5, 2026
• CVE-2026-27389WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability9.8Mar 5, 2026
• CVE-2026-27390WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability8.8Mar 5, 2026
• CVE-2026-27388WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability7.5Mar 5, 2026
• CVE-2026-27385WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1Mar 5, 2026
• CVE-2026-27386WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability7.5Mar 5, 2026
• CVE-2026-22473WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability8.8Mar 5, 2026
• CVE-2025-69302WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability7.1Feb 20, 2026
• CVE-2025-69095WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability6.5Jan 22, 2026
• CVE-2025-69002WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability8.8Jan 22, 2026