themebeez

Products

ProductCVEsExploitedLatest
Cream Blog2–Apr 8, 2026
Cream Magazine2–Jan 23, 2026
Fascinate2–Jul 13, 2026
Orchid Store2–Jan 23, 2026
Royale News1–Apr 8, 2026
Simple GDPR Cookie Compliance1–Jan 23, 2026
Themebeez Toolkit1–Dec 30, 2025
Universal Google Adsense and Ads manager1–Jan 23, 2026

Exploited and recent CVEs

  • CVE-2026-57779 Medium 5.3 WordPress Fascinate theme <= 1.1.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-39649 Medium 5.3 WordPress Royale News theme <= 2.2.4 - Broken Access Control vulnerability 0.2%
  • CVE-2026-39648 Medium 5.3 WordPress Cream Blog theme <= 2.1.7 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24615 Medium 5.3 WordPress Cream Magazine theme <= 2.1.10 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24612 Medium 5.3 WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24604 Medium 5.3 WordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24603 Medium 5.3 WordPress Universal Google Adsense and Ads manager plugin <= 1.1.8 - Broken Access Control vulnerability 0.3%
  • CVE-2025-69010 Medium 5.3 WordPress Themebeez Toolkit plugin <= 1.3.5 - Broken Access Control vulnerability 0.3%
  • CVE-2024-6987 Medium 4.3 Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation 0.3%
  • CVE-2023-28687 High 7.1 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%
  • CVE-2023-28687 High 7.1 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%
  • CVE-2023-28687 High 7.1 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%