peregrinethemes

Products

ProductCVEsExploitedLatest
Bloglo1–Jun 8, 2024
Blogvi1–Jun 8, 2024
Hester1–Mar 27, 2025
Hester Core1–Jun 26, 2026
Shopwell1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-57656 Medium 5.9 WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-25333 Medium 5.3 WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability 0.3%
  • CVE-2025-26734 Medium 6.5 WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-35715 Medium 6.5 WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-35715 Medium 6.5 WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability 0.3%