AlThemist
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme | 1 | – | Mar 5, 2025 |
| Lafka Plugin | 1 | – | Apr 5, 2025 |
| Zass - WooCommerce Theme for Handmade Artists and Artisans | 1 | – | Mar 5, 2025 |
Exploited and recent CVEs
- CVE-2025-1233 Lafka Plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update 0.3%
- CVE-2024-13810 Zass - WooCommerce Theme for Handmade Artists and Artisans <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import 0.2%
- CVE-2024-13811 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import 0.2%