thinkupthemes

Products

ProductCVEsExploitedLatest
Consulting1–Dec 31, 2025
Drift1–Feb 19, 2026
Melos1–Dec 31, 2025
Minamaze1–Dec 31, 2025
Renden1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2025-12117 Medium 6.4 Renden <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title 0.3%
  • CVE-2025-12116 Medium 6.4 Drift <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title 0.3%
  • CVE-2025-62991 Medium 6.5 WordPress Minamaze theme <= 1.10.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63032 Medium 6.5 WordPress Consulting theme <= 1.5.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-62136 Medium 6.5 WordPress Melos theme <= 1.6.0 - Cross Site Scripting (XSS) vulnerability 0.2%