Log in Start free

DesignThemes

Products

ProductCVEsExploitedLatest
LMS4–Oct 10, 2026
DesignThemes Core Features3–Feb 20, 2026
Reservation Plugin2–Jan 22, 2026
WeDesignTech Ultimate Booking Addon2–Mar 5, 2026
DesignThemes Directory Addon1–Mar 5, 2026
DesignThemes LMS1–Dec 2, 2025
DesignThemes LMS Addon1–Dec 30, 2025
DesignThemes Portfolio1–Mar 5, 2026
DesignThemes Portfolio Addon1–Dec 30, 2025
DT LMS – elearning, WordPress LMS Plugin1–Sep 12, 2026
Finance Consultant1–May 23, 2025
Fitness Zone WordPress Theme1–Jul 2, 2026
HomeFix Elementor Portfolio1–Dec 30, 2025
Insurance1–Oct 22, 2025
Invico - WordPress Consulting Business Theme1–Jul 16, 2025
Kids Heaven1–Jan 22, 2026
Kids Life | Children School WordPress1–Jul 2, 2026
Knowledge Base1–Oct 22, 2025
Kriya1–Oct 22, 2025
LMS Elementor Pro1–Mar 5, 2026
Ofiz - WordPress Business Consulting Theme1–Jul 16, 2025
OneLife1–Jan 22, 2026
Pet World1–May 23, 2025
Red Art1–Jul 4, 2025
Single Property1–Oct 22, 2025
Solar Energy1–Oct 22, 2025
SpaLab | Beauty Salon WordPress Theme1–Jul 2, 2026
Trendy Travel1–Jul 2, 2026
Triss1–Oct 22, 2025
VEDA1–Oct 22, 2025
VEDA - MultiPurpose WordPress Theme1–Mar 5, 2025
Visual Art | Gallery WordPress Theme1–Jul 16, 2025
Vivagh1–Jan 22, 2026
WeDesignTech Portfolio1–Dec 30, 2025
Crafts & Arts1–May 23, 2025
Whistle - Sports Club1–Oct 9, 2026
Dental Clinic1–Mar 5, 2026
DesignThemes Booking Manager1–Mar 5, 2026
DesignThemes Core1–Dec 30, 2025

Exploited and recent CVEs

  • CVE-2026-78532 High 7.1 WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-94061 High 7.1 WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-11355 Medium 5.3 DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions 0.4%
  • CVE-2026-27404 High 7.1 WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-27402 High 7.1 WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-69155 High 7.1 WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-69154 High 7.1 WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-69153 High 7.1 WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-27983 Critical 9.8 WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability 0.4%
  • CVE-2026-27390 High 8.8 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability 0.5%
  • CVE-2026-27389 Critical 9.8 WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability 0.5%
  • CVE-2026-27388 High 7.5 WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability 0.4%
  • CVE-2026-27386 High 7.5 WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability 0.3%
  • CVE-2026-27385 High 7.1 WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22473 High 8.8 WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-69302 High 7.1 WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69095 Medium 6.5 WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerability 0.3%
  • CVE-2025-69002 High 8.8 WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-68899 High 8.8 WordPress Vivagh theme <= 2.4 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-67619 High 8.8 WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerability 0.7%
  • CVE-2025-68982 Medium 5.3 WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68981 Medium 5.3 WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68980 Medium 5.3 WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68978 Medium 6.5 WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68977 Medium 6.5 WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64221 High 7.1 WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-13542 Critical 9.8 DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation 0.4%
  • CVE-2025-60234 High 8.8 WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-60228 High 8.8 WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-60215 High 8.8 WordPress Kriya theme <= 3.4 - PHP Object Injection Vulnerability 0.5%