Jthemes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| xSmart | 4 | – | Jan 22, 2026 |
| Genemy | 3 | – | Jun 17, 2026 |
| Prestige | 2 | – | Feb 20, 2026 |
| Exzo | 1 | – | Feb 20, 2026 |
| Sale! Immigration law, Visa services support, Migration Agent Consulting | 1 | – | Dec 18, 2025 |
| Themebox - Digital Products Ecommerce | 1 | – | May 27, 2026 |
| imEvent | 1 | – | Nov 6, 2025 |
Exploited and recent CVEs
- CVE-2025-69138 WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability 0.4%
- CVE-2025-69137 WordPress Genemy theme <= 1.6.6 - Broken Access Control vulnerability 0.3%
- CVE-2025-52747 WordPress Themebox - Digital Products Ecommerce theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-69393 WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-69330 WordPress Prestige theme < 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-69329 WordPress Prestige theme < 1.4.1 - PHP Object Injection vulnerability 0.4%
- CVE-2025-54002 WordPress xSmart theme <= 1.2.9.4 - Broken Access Control vulnerability 0.3%
- CVE-2025-50007 WordPress xSmart theme <= 1.2.9.4 - Privilege Escalation vulnerability 0.5%
- CVE-2025-50006 WordPress xSmart theme <= 1.2.9.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2025-59138 WordPress Genemy theme <= 1.6.6 - Server Side Request Forgery (SSRF) vulnerability 0.2%
- CVE-2025-59134 WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme <= 1.5.8 - Privilege Escalation vulnerability 0.3%
- CVE-2025-58243 WordPress imEvent Theme <= 3.4.0 - Broken Access Control Vulnerability 0.3%
- CVE-2025-62936 WordPress xSmart theme <= 1.2.9.4 - Content Injection vulnerability 0.3%