Ex-Themes vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20253
3. 20261

Newest CVEs

• CVE-2026-32440

  WordPress WP Food plugin < 2.7.1 - Broken Access Control vulnerability

  Ex-Themes · WP Food

  Medium5.3
• CVE-2025-54722

  WordPress WooTour plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability

  Ex-Themes · WooTour

  High7.1
• CVE-2025-60121

  WordPress WooEvents plugin <= 4.1.7 - Broken Access Control vulnerability

  Ex-Themes · WooEvents

  Medium5.3
• CVE-2024-13792

  WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

  Ex-Themes · WooCommerce Food - Restaurant Menu & Food ordering

  High7.3
• CVE-2024-47322

  WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

  Ex-Themes · WP Timeline – Vertical and Horizontal timeline plugin

  High7.1
• CVE-2024-47324

  WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

  Ex-Themes · WP Timeline – Vertical and Horizontal timeline plugin

  High7.5
• CVE-2024-47323

  WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

  Ex-Themes · WP Timeline – Vertical and Horizontal timeline plugin

  High8.1
• CVE-2024-8671

  WooEvents <= 4.1.2 - Unauthenticated Arbitrary File Overwrite

  Ex-Themes · WooEvents - Calendar and Event Booking

  Critical9.1