BE
Product
Betheme
25
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 1High 9Medium 15Low 0
Watch
Add Betheme to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-65548 | 9.9 | Aug 6 | WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability Affected: through 28.4.2 |
| CVE-2026-6261 | 8.8 | May 5 | Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload Affected: through 28.4 |
| CVE-2024-2694 | 8.8 | Aug 30 | The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of untrusted input of the 'mfn-page-items'… Affected: through 27.5.6 |
| CVE-2022-45356 | 8.8 | Mar 25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: before 26.6.3 |
| CVE-2022-3861 | 8.8 | Nov 21 | The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import,… Affected: before 26.6 |
| CVE-2022-45077 | 8.8 | Nov 17 | Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress Affected: before 26.6 |
| CVE-2022-45353 | 8.1 | Jan 14 | Broken Access Control in Betheme theme <= 26.6.1 on WordPress Affected: through 26.6.1 |
| CVE-2023-47770 | 7.6 | Jun 19 | Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1 Affected: before 27.1.2 |
| CVE-2023-39998 | 7.2 | Jun 19 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1 Affected: before 27.1.2 |
| CVE-2026-94415 | 7.1 | Oct 9 | WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability Affected: through 28.5.8 |
| CVE-2026-6262 | 6.5 | May 5 | Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload' Affected: through 28.4 |
| CVE-2025-63075 | 6.5 | Dec 9 | WordPress Betheme theme <= 28.2 - Cross Site Scripting (XSS) vulnerability Affected: through 28.2 |
| CVE-2026-6178 | 6.4 | Aug 26 | Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode Affected: through 28.4 |
| CVE-2025-9371 | 6.4 | Oct 9 | Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title' Affected: through 28.1.6 |
| CVE-2025-7399 | 6.4 | Aug 6 | Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 28.1.3 |
| CVE-2024-5647 | 6.4 | Jul 3 | Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 28.4 |
| CVE-2023-29101 | 6.1 | May 10 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Muffingroup Betheme theme <= 26.7.5 versions Affected: through 26.7.5 |
| CVE-2025-3077 | 5.4 | Apr 16 | Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 28.0.3 |
| CVE-2025-0450 | 5.4 | Jan 21 | Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS Affected: through 27.6.1 |
| CVE-2024-5567 | 5.4 | Sep 13 | The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 27.5.5 due to insufficient input… Affected: before 27.5.5 |
| CVE-2024-3998 | 5.4 | Aug 30 | The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 27.5.6 due to… Affected: through 27.5.6 |
| CVE-2022-45351 | 5.4 | Mar 25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: through 26.6.1 |
| CVE-2022-45363 | 5.4 | Nov 22 | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress Affected: through 26.6.1 |
| CVE-2022-45352 | 4.3 | Mar 25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: before 26.6.3 |
| CVE-2022-45349 | 4.3 | Mar 25 | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: through 26.6.1 |
Showing 25