sparklewpthemes

Products

Product	CVEs	Exploited	Latest
Appzend	1	–	Jul 29, 2025
Blogger Buzz	1	–	Aug 14, 2025
Construction Light	1	–	Dec 18, 2025
Educenter	1	–	Jul 26, 2025
Fitness FSE	1	–	Feb 19, 2026
Fitness Park	1	–	Jun 20, 2025
Hello FSE	1	–	Feb 19, 2026
Hello FSE Blog	1	–	Jun 20, 2025
Kingcabs	1	–	Dec 13, 2025
Spark Multipurpose	1	–	Jun 20, 2025
Sparkle Demo Importer	1	–	Jun 21, 2024
Sparkle FSE	1	–	Dec 18, 2025

CVE-2026-25394 Medium 4.3 WordPress Fitness FSE theme <= 1.0.6 - Broken Access Control vulnerability 0.2%
CVE-2026-25393 Medium 4.3 WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability 0.2%
CVE-2025-62960 Medium 5.4 WordPress Construction Light theme <= 1.6.7 - Broken Access Control vulnerability 0.2%
CVE-2025-62961 Medium 5.4 WordPress Sparkle FSE theme <= 1.0.9 - Broken Access Control vulnerability 0.2%
CVE-2025-7058 Medium 6.4 Kingcabs <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter 0.2%
CVE-2025-54680 Medium 6.5 WordPress Blogger Buzz Theme theme <= 1.2.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
CVE-2025-5587 Medium 6.4 Appzend <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via progressbarLayout Parameter 0.4%
CVE-2025-5529 Medium 6.4 Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
CVE-2025-49970 Medium 4.3 WordPress Hello FSE Blog theme <= 1.0.6 - Broken Access Control Vulnerability 0.3%
CVE-2025-50030 Medium 6.5 WordPress Spark Multipurpose theme <= 1.0.7 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2025-50033 Medium 6.5 WordPress Fitness Park theme <= 1.1.1 - Cross Site Scripting (XSS) Vulnerability 0.3%
CVE-2024-6120 Medium 6.5 Sparkle Demo Importer <= 1.4.7 - Missing Authorization to Authorized(Subscriber+) Post/Pages/Attachements Deletion and Demo Data Import 0.5%