| CVE-2026-94415 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Muffingroup…
|
7.1
High
|
Oct 9, 2026 |
| CVE-2026-6178 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's 'icon_box_2' shortcode in…
|
6.4
Medium
|
Aug 26, 2026 |
| CVE-2026-65548 |
Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions
|
9.9
Critical
|
Aug 6, 2026 |
| CVE-2026-6261 |
The Betheme theme for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 28.4
|
8.8
High
|
May 5, 2026 |
| CVE-2026-6262 |
The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4
|
6.5
Medium
|
May 5, 2026 |
| CVE-2025-63075 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in muffingroup…
|
6.5
Medium
|
Dec 9, 2025 |
| CVE-2025-9371 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘page_title’ parameter in all…
|
6.4
Medium
|
Oct 9, 2025 |
| CVE-2025-7399 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via an Elementor display setting in all…
|
6.4
Medium
|
Aug 6, 2025 |
| CVE-2024-5647 |
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups…
|
6.4
Medium
|
Jul 3, 2025 |
| CVE-2025-3077 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Button shortcode and…
|
6.4
Medium
|
Apr 16, 2025 |
| CVE-2025-0450 |
The Betheme plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom JS functionality…
|
6.4
Medium
|
Jan 21, 2025 |
| CVE-2024-5567 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to,…
|
6.4
Medium
|
Sep 13, 2024 |
| CVE-2024-2694 |
The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via…
|
8.8
High
|
Aug 30, 2024 |
| CVE-2024-3998 |
The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in…
|
6.4
Medium
|
Aug 30, 2024 |
| CVE-2023-39998 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1
|
8.2
High
|
Jun 19, 2024 |
| CVE-2022-45356 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Medium
|
Mar 25, 2024 |
| CVE-2022-45352 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Medium
|
Mar 25, 2024 |
| CVE-2022-45351 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
5.4
Medium
|
Mar 25, 2024 |
| CVE-2022-45349 |
Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1
|
4.3
Medium
|
Mar 25, 2024 |
| CVE-2023-29101 |
Unauth
|
7.1
High
|
May 10, 2023 |
| CVE-2022-45353 |
Broken Access Control in Betheme theme <= 26.6.1 on WordPress
|
4.3
Medium
|
Jan 14, 2023 |
| CVE-2022-45363 |
Auth
|
5.4
Medium
|
Nov 22, 2022 |
| CVE-2022-3861 |
The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via…
|
8.8
High
|
Nov 21, 2022 |