Ex-Themes

Products

Product	CVEs	Exploited	Latest
WP Timeline – Vertical and Horizontal timeline plugin	3	–	Oct 6, 2024
WooCommerce Food - Restaurant Menu & Food ordering	1	–	Feb 20, 2025
WooEvents	1	–	Sep 26, 2025
WooEvents - Calendar and Event Booking	1	–	Sep 24, 2024
WooTour	1	–	Nov 6, 2025
WP Food	1	–	Mar 13, 2026

CVE-2026-32440 Medium 5.3 WordPress WP Food plugin < 2.7.1 - Broken Access Control vulnerability 0.2%
CVE-2025-54722 High 7.1 WordPress WooTour plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-60121 Medium 5.3 WordPress WooEvents plugin <= 4.1.7 - Broken Access Control vulnerability 0.3%
CVE-2024-13792 High 7.3 WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids 0.5%
CVE-2024-47322 High 7.1 WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-47324 High 7.5 WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability 0.5%
CVE-2024-47323 High 8.1 WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability 0.6%
CVE-2024-8671 Critical 9.1 WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite 1.0%