Log in Start free

desertthemes

Products

ProductCVEsExploitedLatest
NewsMash3–Feb 20, 2026
Corpiva1–Mar 13, 2026
NewsMunch1–Dec 5, 2024
SoftMe1–Sep 5, 2025

Exploited and recent CVEs

  • CVE-2026-32344 Medium 4.3 WordPress Corpiva theme <= 1.0.96 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2024-56208 Medium 6.5 WordPress NewsMash theme <= 1.0.71 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-58817 Medium 4.3 WordPress SoftMe Theme <= 1.1.27 - Broken Access Control Vulnerability 0.2%
  • CVE-2024-37441 Medium 4.3 WordPress NewsMash theme <= 1.0.34 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-10849 Medium 6.4 NewsMash <= 1.0.71 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-10848 Medium 6.4 NewsMunch <= 1.0.35 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%