Log in Start free

themepassion

Products

ProductCVEsExploitedLatest
Support Ticket2–Aug 20, 2025
Ultra Portfolio2–Jan 22, 2026
Legacy Admin1–Mar 25, 2026
Ultra WordPress Admin1–Mar 25, 2026

Exploited and recent CVEs

  • CVE-2026-22524 High 7.1 WordPress Legacy Admin plugin <= 9.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-22523 High 7.1 WordPress Ultra WordPress Admin plugin <= 11.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69180 High 8.5 WordPress Ultra Portfolio plugin <= 6.7 - SQL Injection vulnerability 0.3%
  • CVE-2025-49420 High 7.1 WordPress Ultra Portfolio - WordPress Plugin <= 6.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-49422 Critical 9.8 WordPress Support Ticket Plugin <= 1.9 - Privilege Escalation Vulnerability 0.5%
  • CVE-2025-49424 High 7.1 WordPress Support Ticket Plugin <= 1.9 - Cross Site Scripting (XSS) Vulnerability 0.2%