Themeinwp
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Booster Extension | 1 | – | May 2, 2024 |
| Default Mag | 1 | – | Apr 10, 2024 |
| Demo Import Kit | 1 | – | Oct 15, 2025 |
| NewsXpress | 1 | – | Apr 15, 2024 |
| Social Share With Floating Bar | 1 | – | Oct 18, 2024 |
Exploited and recent CVEs
- CVE-2025-10051 Demo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload 0.7%
- CVE-2024-8790 Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting 0.3%
- CVE-2024-2109 Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display 0.5%
- CVE-2024-31938 WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-31386 Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability 0.4%