BZOTheme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CraftXtore | 1 | – | Jun 9, 2025 |
| Fitrush | 1 | – | Jun 9, 2025 |
| GiftXtore | 1 | – | Jun 9, 2025 |
| Mella | 1 | – | Jan 22, 2026 |
| Monki | 1 | – | Dec 18, 2025 |
| Petito | 1 | – | Jun 9, 2025 |
| PrintXtore | 1 | – | Jun 27, 2025 |
| Zagg - Electronics & Accessories WooCommerce WordPress Theme | 1 | – | Jun 14, 2025 |
| Zenny | 1 | – | Jun 27, 2025 |
Exploited and recent CVEs
- CVE-2025-67616 WordPress Mella theme <= 1.2.29 - Local File Inclusion vulnerability 0.7%
- CVE-2025-53436 WordPress Monki theme <= 2.0.5 - Local File Inclusion vulnerability 0.5%
- CVE-2025-24769 WordPress Zenny theme <= 1.7.5 - Local File Inclusion Vulnerability 0.7%
- CVE-2025-28946 WordPress PrintXtore theme < 1.7.8 - Local File Inclusion vulnerability 0.7%
- CVE-2025-4200 Zagg - Electronics & Accessories WooCommerce WordPress Theme <= 1.4.1 - Unauthenticated Local File Inclusion 0.8%
- CVE-2023-26005 WordPress Fitrush <= 1.3.4 - Local File Inclusion Vulnerability 0.8%
- CVE-2025-24770 WordPress CraftXtore theme <= 1.7 - Local File Inclusion Vulnerability 0.8%
- CVE-2025-27362 WordPress Petito theme < 1.6.6 - Local File Inclusion vulnerability 0.8%
- CVE-2025-28888 WordPress GiftXtore theme < 1.7.7 - Local File Inclusion vulnerability 0.8%