Themovation
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Bellevue | 1 | – | May 19, 2025 |
| QuickCal | 1 | – | Sep 5, 2026 |
| QuickCal - Appointment Booking Calendar for WordPress | 1 | – | May 16, 2025 |
Exploited and recent CVEs
- CVE-2026-15984 QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters 0.3%
- CVE-2025-39398 WordPress Hotel + Bed and Breakfast Booking Calendar Theme | Bellevue theme <= 4.2.2 - Broken Access Control vulnerability 0.2%
- CVE-2025-32299 WordPress QuickCal plugin <= 1.0.15 - Sensitive Data Exposure Vulnerability 0.4%