NooTheme CitiLights

• CVE-2026-24974 High 8.8 WordPress CitiLights theme <= 3.7.1 - PHP Object Injection vulnerability 0.4%
• CVE-2026-24973 High 7.1 WordPress CitiLights theme <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2026-25367 Medium 5.3 WordPress CitiLights theme < 3.7.2 - Broken Access Control vulnerability 0.3%