Log in Start free

Themeton

Products

ProductCVEsExploitedLatest
Spare3–Jun 17, 2025
HotStar – Multi-Purpose Business Theme2–May 23, 2025
The Business2–May 23, 2025
Seven Stars2–Jun 27, 2025
Acerola2–May 23, 2025
Lagom1–Jun 17, 2026
PIMP - Creative MultiPurpose1–Jun 9, 2025
PressGrid - Frontend Publish Reaction & Multimedia Theme1–Jun 9, 2025
Rozario1–May 16, 2025
The Barber Shop1–Jun 17, 2026
The Fashion - Model Agency One Page Beauty Theme1–Jun 9, 2025
Zuut1–Mar 19, 2026
Consult Aid1–Jan 22, 2026
Dash1–May 23, 2025
Finag1–Mar 19, 2026
FLAP - Business WordPress Theme1–Jun 9, 2025

Exploited and recent CVEs

  • CVE-2025-60230 Critical 9.8 WordPress The Barber Shop theme <= 1.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-60229 Critical 9.8 WordPress Lagom theme <= 2.0 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-60237 Critical 9.8 WordPress Finag theme <= 1.5.0 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-60233 Critical 9.8 WordPress Zuut theme <= 1.4.2 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-67617 Critical 9.8 WordPress Consult Aid theme <= 1.4.3 - PHP Object Injection vulnerability 0.8%
  • CVE-2025-31067 High 7.1 WordPress Seven Stars theme <= 1.4.4 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-31919 Critical 9.8 WordPress Spare <= 1.7 - PHP Object Injection Vulnerability 0.5%
  • CVE-2025-31052 Critical 9.8 WordPress The Fashion - Model Agency One Page Beauty Theme plugin <= 1.4.4 - Deserialization of untrusted data Vulnerability 0.6%
  • CVE-2025-31396 Critical 9.8 WordPress FLAP - Business WordPress Theme <= 1.5 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-31398 Critical 9.8 WordPress PIMP - Creative MultiPurpose <= 1.7 - Deserialization of untrusted data Vulnerability 0.6%
  • CVE-2025-31429 Critical 9.8 WordPress PressGrid - Frontend Publish Reaction & Multimedia Theme <= 1.3.1 - Deserialization of untrusted data Vulnerability 0.6%
  • CVE-2025-31638 High 7.1 WordPress Spare <= 1.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
  • CVE-2025-31049 Critical 9.8 WordPress Dash <= 1.3 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-31069 Critical 9.8 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-31430 Critical 9.8 WordPress The Business <= 1.6.1 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-31927 Critical 9.8 WordPress Acerola <= 1.6.5 - PHP Object Injection Vulnerability 0.6%
  • CVE-2025-31065 Medium 5.3 WordPress Rozario <= 1.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31066 Medium 5.3 WordPress Acerola theme <= 1.6.5 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-31068 Medium 4.3 WordPress Seven Stars <= 1.4.4 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2025-31071 Medium 5.3 WordPress HotStar – Multi-Purpose Business Theme <= 1.4 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31630 Medium 5.3 WordPress The Business <= 1.6.1 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-31639 Medium 4.3 WordPress Spare <= 1.7 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%