themebeez
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Cream Blog | 2 | – | Apr 8, 2026 |
| Cream Magazine | 2 | – | Jan 23, 2026 |
| Fascinate | 2 | – | Jul 13, 2026 |
| Orchid Store | 2 | – | Jan 23, 2026 |
| Royale News | 1 | – | Apr 8, 2026 |
| Simple GDPR Cookie Compliance | 1 | – | Jan 23, 2026 |
| Themebeez Toolkit | 1 | – | Dec 30, 2025 |
| Universal Google Adsense and Ads manager | 1 | – | Jan 23, 2026 |
Exploited and recent CVEs
- CVE-2026-57779 WordPress Fascinate theme <= 1.1.5 - Broken Access Control vulnerability 0.3%
- CVE-2026-39649 WordPress Royale News theme <= 2.2.4 - Broken Access Control vulnerability 0.2%
- CVE-2026-39648 WordPress Cream Blog theme <= 2.1.7 - Broken Access Control vulnerability 0.2%
- CVE-2026-24615 WordPress Cream Magazine theme <= 2.1.10 - Broken Access Control vulnerability 0.2%
- CVE-2026-24612 WordPress Orchid Store theme <= 1.5.15 - Broken Access Control vulnerability 0.2%
- CVE-2026-24604 WordPress Simple GDPR Cookie Compliance plugin <= 2.0.0 - Broken Access Control vulnerability 0.3%
- CVE-2026-24603 WordPress Universal Google Adsense and Ads manager plugin <= 1.1.8 - Broken Access Control vulnerability 0.3%
- CVE-2025-69010 WordPress Themebeez Toolkit plugin <= 1.3.5 - Broken Access Control vulnerability 0.3%
- CVE-2024-6987 Orchid Store <= 1.5.6 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Activation 0.3%
- CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%
- CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%
- CVE-2023-28687 Reflected Cross-Site Scripting (XSS) vulnerability in multiple WordPress themes 0.5%