MuffinGroup vulnerabilities

CVEs per yearBy the year they were published

1. 20224
2. 20232
3. 20248
4. 20256
5. 20265

Newest CVEs

• CVE-2026-94415

  WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability

  Muffingroup · Betheme

  High7.1
• CVE-2026-6178

  Betheme <= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode

  MuffinGroup · Betheme

  Medium6.4
• CVE-2026-65548

  WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability

  Muffingroup · Betheme

  Critical9.9
• CVE-2026-6261

  Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload

  MuffinGroup · Betheme

  High8.8
• CVE-2026-6262

  Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'

  MuffinGroup · Betheme

  Medium6.5
• CVE-2025-63075

  WordPress Betheme theme <= 28.2 - Cross Site Scripting (XSS) vulnerability

  muffingroup · Betheme

  Medium6.5
• CVE-2025-9371

  Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'

  MuffinGroup · Betheme

  Medium6.4
• CVE-2025-7399

  Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  MuffinGroup · Betheme

  Medium6.4
• CVE-2024-5647

  Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library

  blossomthemes · BlossomThemes Social Feed

  Medium6.4
• CVE-2025-3077

  Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  MuffinGroup · Betheme

  Medium6.4