ThemeGrill ColorMag

• CVE-2025-9202 Medium 4.3 ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation 0.2%
• CVE-2024-2500 Medium 6.4 ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name 0.4%
• CVE-2024-0679 Medium 6.5 ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation 1.3%