wpweaver

Products

Product	CVEs	Exploited	Latest
Turnkey bbPress by WeaverTheme	2	–	Aug 16, 2026
Weaver Show Posts	2	–	Mar 21, 2026
Weaver Xtreme	2	–	Jan 11, 2024
Weaver Xtreme Theme Support	2	–	Oct 13, 2026
Weaver Themes Shortcode Compatibility	1	–	Jan 21, 2025

CVE-2026-54870 Medium 6.5 WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability 0.1%
CVE-2026-10035 Medium 6.6 Turnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection 0.7%
CVE-2026-2121 Medium 4.4 Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting 0.2%
CVE-2025-22267 Medium 6.5 WordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2024-12221 Medium 6.1 Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameter 0.4%
CVE-2024-4939 Medium 6.4 Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode 0.3%
CVE-2023-6990 Medium 5.4 Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
CVE-2023-1404 Medium 6.4 Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name 0.5%
CVE-2023-1403 Medium 6.4 Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name 0.5%