Dream-Theme vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241
3. 20255
4. 20261

Newest CVEs

• CVE-2026-6646

  The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter

  Dream-Theme · The7 — Website and eCommerce Builder for WordPress

  Medium6.4
• CVE-2025-63076

  WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability

  Dream-Theme · The7 Elements

  High7.5
• CVE-2025-63074

  WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability

  Dream-Theme · The7

  High7.5
• CVE-2025-63073

  WordPress The7 theme < 12.9.0 - Cross Site Scripting (XSS) vulnerability

  Dream-Theme · The7

  Medium6.5
• CVE-2025-11897

  The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'

  Dream-Theme · The7 — Website and eCommerce Builder for WordPress

  Medium6.4
• CVE-2025-7726

  The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes

  Dream-Theme · The7 — Website and eCommerce Builder for WordPress

  Medium6.4
• CVE-2024-5451

  The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute

  Dream-Theme · The7 — Website and eCommerce Builder for WordPress

  Medium6.4
• CVE-2023-32123

  WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)

  Dream-Theme · The7

  Medium6.1
• CVE-2023-29100

  WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)

  Dream-Theme · The7

  High7.1