DE
Vendor
designthemes
46
CVEs
0
On KEV
2
New 30D
Products
LM9.3
LMS
designthemes
4 CVEs0 on KEV1 new
WS7.1
Whistle - Sports Club
Designthemes
1 CVEs0 on KEV1 new
DC7.5
DesignThemes Core Features
designthemes
3 CVEs0 on KEV0 new
RP7.1
Reservation Plugin
designthemes
2 CVEs0 on KEV0 new
WU9.8
WeDesignTech Ultimate Booking Addon
designthemes
2 CVEs0 on KEV0 new
CA8.8
Crafts & Arts
designthemes
1 CVEs0 on KEV0 new
DC8.8
Dental Clinic
designthemes
1 CVEs0 on KEV0 new
DB7.5
DesignThemes Booking Manager
designthemes
1 CVEs0 on KEV0 new
DC6.5
DesignThemes Core
designthemes
1 CVEs0 on KEV0 new
DD7.5
DesignThemes Directory Addon
designthemes
1 CVEs0 on KEV0 new
DL9.8
DesignThemes LMS
DesignThemes
1 CVEs0 on KEV0 new
DL5.3
DesignThemes LMS Addon
designthemes
1 CVEs0 on KEV0 new
DP7.1
DesignThemes Portfolio
designthemes
1 CVEs0 on KEV0 new
DP6.5
DesignThemes Portfolio Addon
designthemes
1 CVEs0 on KEV0 new
DL5.3
DT LMS โ elearning, WordPress LMS Plugin
designthemes
1 CVEs0 on KEV0 new
FC8.8
Finance Consultant
designthemes
1 CVEs0 on KEV0 new
FZ7.1
Fitness Zone WordPress Theme
Designthemes
1 CVEs0 on KEV0 new
HE5.3
HomeFix Elementor Portfolio
designthemes
1 CVEs0 on KEV0 new
IN8.8
Insurance
designthemes
1 CVEs0 on KEV0 new
IW7.1
Invico - WordPress Consulting Business Theme
designthemes
1 CVEs0 on KEV0 new
KH8.8
Kids Heaven
designthemes
1 CVEs0 on KEV0 new
KL7.1
Kids Life | Children School WordPress
Designthemes
1 CVEs0 on KEV0 new
KB8.8
Knowledge Base
designthemes
1 CVEs0 on KEV0 new
KR8.8
Kriya
designthemes
1 CVEs0 on KEV0 new
LE9.8
LMS Elementor Pro
designthemes
1 CVEs0 on KEV0 new
OW7.1
Ofiz - WordPress Business Consulting Theme
designthemes
1 CVEs0 on KEV0 new
ON8.8
OneLife
designthemes
1 CVEs0 on KEV0 new
PW8.8
Pet World
designthemes
1 CVEs0 on KEV0 new
RA8.8
Red Art
designthemes
1 CVEs0 on KEV0 new
SP8.8
Single Property
designthemes
1 CVEs0 on KEV0 new
SE8.8
Solar Energy
designthemes
1 CVEs0 on KEV0 new
SB7.1
SpaLab | Beauty Salon WordPress Theme
designthemes
1 CVEs0 on KEV0 new
TT7.1
Trendy Travel
designthemes
1 CVEs0 on KEV0 new
TR7.1
Triss
designthemes
1 CVEs0 on KEV0 new
VE8.8
VEDA
designthemes
1 CVEs0 on KEV0 new
VM9.8
VEDA - MultiPurpose WordPress Theme
designthemes
1 CVEs0 on KEV0 new
VA8.8
Visual Art | Gallery WordPress Theme
designthemes
1 CVEs0 on KEV0 new
VI8.8
Vivagh
designthemes
1 CVEs0 on KEV0 new
WP5.3
WeDesignTech Portfolio
designthemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-78532 | LM LMS designthemes | 7.1 | Oct 10 | WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-94061 | WS Whistle - Sports Club Designthemes | 7.1 | Oct 9 | WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-11355 | DL DT LMS โ elearning, WordPress LMS Plugin designthemes | 5.3 | Sep 12 | DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions |
| CVE-2026-27404 | LM LMS Designthemes | 7.1 | Jul 2 | WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27402 | KL Kids Life | Children School WordPress Designthemes | 7.1 | Jul 2 | WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69155 | FZ Fitness Zone WordPress Theme Designthemes | 7.1 | Jul 2 | WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69154 | SB SpaLab | Beauty Salon WordPress Theme designthemes | 7.1 | Jul 2 | WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69153 | TT Trendy Travel designthemes | 7.1 | Jul 2 | WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-27983 | LE LMS Elementor Pro designthemes | 9.8 | Mar 5 | WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability |
| CVE-2026-27390 | WU WeDesignTech Ultimate Booking Addon designthemes | 8.8 | Mar 5 | WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability |
| CVE-2026-27389 | WU WeDesignTech Ultimate Booking Addon designthemes | 9.8 | Mar 5 | WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability |
| CVE-2026-27388 | DB DesignThemes Booking Manager designthemes | 7.5 | Mar 5 | WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability |
| CVE-2026-27386 | DD DesignThemes Directory Addon designthemes | 7.5 | Mar 5 | WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability |
| CVE-2026-27385 | DP DesignThemes Portfolio designthemes | 7.1 | Mar 5 | WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-22473 | DC Dental Clinic designthemes | 8.8 | Mar 5 | WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability |
| CVE-2025-69302 | DC DesignThemes Core Features designthemes | 7.1 | Feb 20 | WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2025-69095 | RP Reservation Plugin designthemes | 6.5 | Jan 22 | WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability |
| CVE-2025-69002 | ON OneLife designthemes | 8.8 | Jan 22 | WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability |
| CVE-2025-68899 | VI Vivagh designthemes | 8.8 | Jan 22 | WordPress Vivagh theme <= 2.4 - PHP Object Injection vulnerability |
| CVE-2025-67619 | KH Kids Heaven designthemes | 8.8 | Jan 22 | WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability |
| CVE-2025-68982 | DL DesignThemes LMS Addon designthemes | 5.3 | Dec 30 | WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability |
| CVE-2025-68981 | HE HomeFix Elementor Portfolio designthemes | 5.3 | Dec 30 | WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability |
| CVE-2025-68980 | WP WeDesignTech Portfolio designthemes | 5.3 | Dec 30 | WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerability |
| CVE-2025-68978 | DC DesignThemes Core designthemes | 6.5 | Dec 30 | WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-68977 | DP DesignThemes Portfolio Addon designthemes | 6.5 | Dec 30 | WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-64221 | RP Reservation Plugin designthemes | 7.1 | Dec 18 | WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-13542 | DL DesignThemes LMS DesignThemes | 9.8 | Dec 2 | DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation |
| CVE-2025-60234 | SP Single Property designthemes | 8.8 | Oct 22 | WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability |
| CVE-2025-60228 | KB Knowledge Base designthemes | 8.8 | Oct 22 | WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability |
| CVE-2025-60215 | KR Kriya designthemes | 8.8 | Oct 22 | WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability |
| CVE-2025-60212 | VE VEDA designthemes | 8.8 | Oct 22 | WordPress VEDA Theme <= 4.2 - PHP Object Injection Vulnerability |
| CVE-2025-53423 | TR Triss designthemes | 7.1 | Oct 22 | WordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-32283 | SE Solar Energy designthemes | 8.8 | Oct 22 | WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerability |
| CVE-2025-31634 | IN Insurance designthemes | 8.8 | Oct 22 | WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerability |
| CVE-2025-31072 | OW Ofiz - WordPress Business Consulting Theme designthemes | 7.1 | Jul 16 | WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-31422 | VA Visual Art | Gallery WordPress Theme designthemes | 8.8 | Jul 16 | WordPress Visual Art | Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerability |
| CVE-2025-31427 | IW Invico - WordPress Consulting Business Theme designthemes | 7.1 | Jul 16 | WordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-52828 | RA Red Art designthemes | 8.8 | Jul 4 | WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerability |
| CVE-2025-52833 | LM LMS designthemes | 9.3 | Jul 4 | WordPress LMS theme <= 9.2 - SQL Injection Vulnerability |
| CVE-2025-52799 | LM LMS designthemes | 7.1 | Jun 27 | WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-31924 | CA Crafts & Arts designthemes | 8.8 | May 23 | WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability |
| CVE-2025-32284 | PW Pet World designthemes | 8.8 | May 23 | WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability |
| CVE-2025-32293 | FC Finance Consultant designthemes | 8.8 | May 23 | WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability |
| CVE-2025-0845 | DC DesignThemes Core Features designthemes | 6.4 | Mar 25 | DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-13471 | DC DesignThemes Core Features designthemes | 7.5 | Mar 5 | DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file |
| CVE-2024-13787 | VM VEDA - MultiPurpose WordPress Theme designthemes | 9.8 | Mar 5 | VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection |
