SeventhQueen

Products

Product	CVEs	Exploited	Latest
Kleo	3	–	Oct 31, 2025
Sweet Date	2	–	Mar 5, 2026
K Elements	2	–	Oct 31, 2025
Typer Core	1	–	Jan 30, 2025
Restrictions for BuddyPress	1	–	Nov 18, 2025
BuddyApp	1	–	Mar 5, 2026
SweetDate Core	1	–	Jun 17, 2026

CVE-2025-69140 High 7.1 WordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-27417 Critical 9.8 WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability 0.4%
CVE-2026-22465 High 7.1 WordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2025-12391 Medium 5.3 Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update 0.3%
CVE-2025-64363 High 7.5 WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability 0.4%
CVE-2025-64362 Medium 6.5 WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2025-39367 Medium 5.3 WordPress Kleo theme < 5.4.4 - Broken Access Control vulnerability 0.3%
CVE-2024-56000 Critical 9.8 WordPress K Elements plugin < 5.4.0 - Unauthenticated Account Takeover vulnerability 0.5%
CVE-2024-12102 Medium 4.3 Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure 0.3%
CVE-2024-56209 High 7.1 WordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-43222 Critical 9.8 WordPress Sweet Date theme <= 3.7.3 - Privilege Escalation vulnerability 0.8%