don-themes
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Molla | 2 | – | Mar 25, 2026 |
| Riode | 2 | – | Mar 25, 2026 |
| Riode Core | 1 | – | Mar 5, 2026 |
| Wolmart | 1 | – | Mar 5, 2026 |
| Wolmart | Multi-Vendor Marketplace WooCommerce Theme | 1 | – | May 8, 2025 |
| Wolmart Core | 1 | – | Feb 20, 2026 |
Exploited and recent CVEs
- CVE-2026-32529 WordPress Molla theme < 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-32528 WordPress Riode | Multi-Purpose WooCommerce theme < 1.6.29 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-22385 WordPress Wolmart theme <= 1.9.6 - Local File Inclusion vulnerability 0.6%
- CVE-2025-69339 WordPress Molla theme <= 1.5.16 - Local File Inclusion vulnerability 0.6%
- CVE-2025-69338 WordPress Riode Core plugin <= 1.6.26 - SQL Injection vulnerability 0.4%
- CVE-2025-69337 WordPress Wolmart Core plugin <= 1.9.6 - SQL Injection vulnerability 0.3%
- CVE-2025-60071 WordPress Riode | Multi-Purpose WooCommerce theme <= 1.6.23 - Local File Inclusion vulnerability 0.5%
- CVE-2024-13793 Wolmart | Multi-Vendor Marketplace WooCommerce Theme <= 1.8.11 - Unauthenticated Arbitrary Shortcode Execution in wolmart_loadmore 0.4%