themebon
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| App Landing Template Blocks for WPBakery (Visual Composer) Page Builder | 1 | – | Dec 12, 2025 |
| Business Template Blocks for WPBakery (Visual Composer) Page Builder | 1 | – | Feb 20, 2026 |
| Digital Marketing and Agency Templates Addons for Elementor | 1 | – | Jun 13, 2025 |
| Easy Woocommerce Customizer | 1 | – | Oct 22, 2025 |
| Ultimate Image Hover Effects | 1 | – | Jan 7, 2025 |
Exploited and recent CVEs
- CVE-2025-69390 WordPress Business Template Blocks for WPBakery (Visual Composer) Page Builder plugin <= 1.3.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-14119 App Landing Template Blocks for WPBakery Page Builder <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
- CVE-2025-59006 WordPress Easy Woocommerce Customizer plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-5938 Digital Marketing and Agency Templates Addons for Elementor <= 1.1.1 - Cross-Site Request Forgery to Import 0.1%
- CVE-2025-22585 WordPress Ultimate Image Hover Effects plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%