Jthemes

Products

ProductCVEsExploitedLatest
xSmart4–Jan 22, 2026
Genemy3–Jun 17, 2026
Prestige2–Feb 20, 2026
Exzo1–Feb 20, 2026
Sale! Immigration law, Visa services support, Migration Agent Consulting1–Dec 18, 2025
Themebox - Digital Products Ecommerce1–May 27, 2026
imEvent1–Nov 6, 2025

Exploited and recent CVEs

  • CVE-2025-69138 High 8.8 WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-69137 Medium 6.5 WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-52747 High 7.1 WordPress Themebox - Digital Products Ecommerce theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69393 High 7.5 WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69330 High 7.1 WordPress Prestige theme < 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69329 Critical 9.8 WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-54002 Medium 6.5 WordPress xSmart theme <= 1.2.9.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-50007 High 8.8 WordPress xSmart theme <= 1.2.9.4 - Privilege Escalation vulnerability 0.5%
  • CVE-2025-50006 High 7.1 WordPress xSmart theme <= 1.2.9.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-59138 Medium 4.9 WordPress Genemy theme <= 1.6.6 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2025-59134 High 8.8 WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme <= 1.5.8 - Privilege Escalation vulnerability 0.3%
  • CVE-2025-58243 Medium 5.3 WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-62936 Medium 4.3 WordPress xSmart theme <= 1.2.9.4 - Content Injection vulnerability 0.3%