| CVE-2026-94415 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup…
|
7.1
Élevée
|
9 oct. 2026 |
| CVE-2026-6178 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'icon_box_2' shortcode in…
|
6.4
Moyenne
|
26 août 2026 |
| CVE-2026-65548 |
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions
|
9.9
Critique
|
6 août 2026 |
| CVE-2026-6261 |
The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4
|
8.8
Élevée
|
5 mai 2026 |
| CVE-2026-6262 |
The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4
|
6.5
Moyenne
|
5 mai 2026 |
| CVE-2025-63075 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in muffingroup…
|
6.5
Moyenne
|
9 déc. 2025 |
| CVE-2025-9371 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all…
|
6.4
Moyenne
|
9 oct. 2025 |
| CVE-2025-7399 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all…
|
6.4
Moyenne
|
6 août 2025 |
| CVE-2024-5647 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
|
6.4
Moyenne
|
3 juil. 2025 |
| CVE-2025-3077 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button shortcode and…
|
6.4
Moyenne
|
16 avr. 2025 |
| CVE-2025-0450 |
The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality…
|
6.4
Moyenne
|
21 janv. 2025 |
| CVE-2024-5567 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to,…
|
6.4
Moyenne
|
13 sept. 2024 |
| CVE-2024-2694 |
The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via…
|
8.8
Élevée
|
30 août 2024 |
| CVE-2024-3998 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in…
|
6.4
Moyenne
|
30 août 2024 |
| CVE-2023-39998 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1
|
8.2
Élevée
|
19 juin 2024 |
| CVE-2022-45356 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Moyenne
|
25 mars 2024 |
| CVE-2022-45352 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Moyenne
|
25 mars 2024 |
| CVE-2022-45351 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Moyenne
|
25 mars 2024 |
| CVE-2022-45349 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
4.3
Moyenne
|
25 mars 2024 |
| CVE-2023-29101 |
Unauth
|
7.1
Élevée
|
10 mai 2023 |
| CVE-2022-45353 |
Broken Access Control in Betheme theme <= 26.6.1 on WordPress
|
4.3
Moyenne
|
14 janv. 2023 |
| CVE-2022-45363 |
Auth
|
5.4
Moyenne
|
22 nov. 2022 |
| CVE-2022-3861 |
The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via…
|
8.8
Élevée
|
21 nov. 2022 |