BuddhaThemes

Products

Product	CVEs	Exploited	Latest
WeDesignTech Ultimate Booking Addon	2	–	Mar 5, 2026
ColorFolio	1	–	Oct 9, 2026
ColorFolio - Freelance Designer WordPress Theme	1	–	Mar 19, 2026
HYDRO	1	–	Jun 27, 2025
Lizza LMS Pro	1	–	Feb 19, 2026
Neo \| Barber Shop WordPress Theme	1	–	Oct 9, 2026

CVE-2026-94065 High 8.8 WordPress ColorFolio theme <= 1.3 - PHP Object Injection vulnerability 0.3%
CVE-2026-94064 High 8.8 WordPress Neo | Barber Shop WordPress Theme theme <= 3.5 - PHP Object Injection vulnerability 0.3%
CVE-2026-27096 High 8.1 WordPress ColorFolio - Freelance Designer WordPress Theme theme <= 1.3 - Deserialization of untrusted data vulnerability 0.3%
CVE-2025-69340 High 7.5 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability 0.5%
CVE-2025-13563 Critical 9.8 Lizza LMS Pro <= 1.0.3 - Unauthenticated Privilege Escalation 0.4%
CVE-2025-69341 Medium 5.4 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.3 - Broken Access Control vulnerability 0.2%
CVE-2025-31428 High 7.1 WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%