Betheme vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BE

Product

Betheme

by muffingroup · last CVE Oct 9, 2026

25

CVEs

0

On KEV

9.9

Max CVSS

1

New 30D

Vulnerabilities25 In the news0 Timeline

Severity mix

Critical 1High 9Medium 15Low 0

Severity

All severities25 Critical1 High9 Medium15 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Betheme to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-6262	6.5	0%	May 5	Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload' Affected: through 28.4
CVE-2025-63075	6.5	0%	Dec 9	WordPress Betheme theme <= 28.2 - Cross Site Scripting (XSS) vulnerability Affected: through 28.2
CVE-2026-6178	6.4	0%	Aug 26	Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode Affected: through 28.4
CVE-2025-9371	6.4	0%	Oct 9	Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title' Affected: through 28.1.6
CVE-2025-7399	6.4	0%	Aug 6	Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 28.1.3
CVE-2024-5647	6.4	0%	Jul 3	Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library Affected: through 28.4
CVE-2023-29101	6.1	0%	May 10	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Muffingroup Betheme theme <= 26.7.5 versions Affected: through 26.7.5
CVE-2025-3077	5.4	0%	Apr 16	Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 28.0.3
CVE-2025-0450	5.4	0%	Jan 21	Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS Affected: through 27.6.1
CVE-2024-5567	5.4	0%	Sep 13	Betheme \| Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Affected: through 27.5.5
CVE-2024-3998	5.4	0%	Aug 30	Betheme \| Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 27.5.6
CVE-2022-45351	5.4	0%	Mar 25	Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: through 26.6.1
CVE-2022-45363	5.4	0%	Nov 22	Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress Affected: through 26.6.1
CVE-2022-45352	4.3	0%	Mar 25	Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: before 26.6.3
CVE-2022-45349	4.3	0%	Mar 25	Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1 Affected: through 26.6.1