Dream-Theme The7 — Website and eCommerce Builder for WordPress

• CVE-2026-6646 Medium 6.4 The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter 0.3%
• CVE-2025-11897 Medium 6.4 The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css' 0.2%
• CVE-2025-7726 Medium 6.4 The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes 0.3%
• CVE-2024-5451 Medium 6.4 The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute 0.3%