Login Request a demo
BE
Product
Betheme
by muffingroup · last CVE Oct 9, 2026
25
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 1High 9Medium 15Low 0
Severity
All severities25Critical1High9Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Betheme to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6261
8.8
1%
May 5
Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload
Affected: through 28.4
CVE-2024-2694
8.8
1%
Aug 30
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
Affected: through 27.5.6
CVE-2022-45356
8.8
1%
Mar 25
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
Affected: before 26.6.3
CVE-2022-3861
8.8
2%
Nov 21
The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import,…
Affected: before 26.6
CVE-2022-45077
8.8
1%
Nov 17
Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress
Affected: before 26.6
CVE-2022-45353
8.1
1%
Jan 14
Broken Access Control in Betheme theme <= 26.6.1 on WordPress
Affected: through 26.6.1
CVE-2023-47770
7.6
0%
Jun 19
Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1
Affected: before 27.1.2
CVE-2023-39998
7.2
0%
Jun 19
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1
Affected: before 27.1.2
CVE-2026-94415
7.1
0%
Oct 9
WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability
Affected: through 28.5.8
Showing 9