CMSSuperHeroes

Products

ProductCVEsExploitedLatest
Clanora1–Oct 22, 2025
Flex Store Users1–Dec 20, 2025
Wastia1–Oct 22, 2025

Exploited and recent CVEs

  • CVE-2025-13619 Critical 9.8 Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation 0.4%
  • CVE-2025-49060 Critical 10.0 WordPress Wastia theme < 1.1.3 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2025-48106 Critical 10.0 WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability 0.6%