Log in Start free

DesigningMedia

Products

ProductCVEsExploitedLatest
Hostiko3–Jan 22, 2026
Eleganzo1–Apr 14, 2026
Energox1–Mar 25, 2026
Instant VA1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2025-15470 Medium 6.5 Eleganzo <= 1.2 - Authenticated (Subscriber+) Arbitrary Directory Deletion 0.3%
  • CVE-2026-24970 High 7.7 WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability 0.3%
  • CVE-2026-24969 High 7.7 WordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability 0.3%
  • CVE-2025-67949 High 7.1 WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-27014 High 7.1 WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2025-27015 High 7.5 WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability 1.0%