HashThemes Total

• CVE-2026-5077 Medium 5.4 Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute 0.2%
• CVE-2023-27456 Medium 4.3 WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation 0.5%
• CVE-2024-1771 Medium 4.3 Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update 0.4%