Log in Start free

Fox-themes

Products

ProductCVEsExploitedLatest
Awa Plugins1–Mar 5, 2026
Prague1–Jun 3, 2026
Reflector1–Feb 20, 2026
Whizz Plugins1–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2025-15654 High 7.1 WordPress Prague plugin <= 2.2.8 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-27359 High 7.1 WordPress Awa Plugins plugin <= 1.4.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24955 High 7.1 WordPress Whizz Plugins plugin <= 1.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24948 High 7.1 WordPress Reflector plugin <= 1.2.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%