designthemes vulnerabilities

CVEs per yearBy the year they were published

1. 202526
2. 202620

Newest CVEs

• CVE-2026-78532

  WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability

  designthemes · LMS

  High7.1
• CVE-2026-94061

  WordPress Whistle - Sports Club theme <= 4.2 - Reflected Cross Site Scripting (XSS) vulnerability

  Designthemes · Whistle - Sports Club

  High7.1
• CVE-2026-11355

  DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX Actions

  designthemes · DT LMS – elearning, WordPress LMS Plugin

  Medium5.3
• CVE-2026-27404

  WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability

  Designthemes · LMS

  High7.1
• CVE-2026-27402

  WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerability

  Designthemes · Kids Life | Children School WordPress

  High7.1
• CVE-2025-69155

  WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability

  Designthemes · Fitness Zone WordPress Theme

  High7.1
• CVE-2025-69154

  WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerability

  designthemes · SpaLab | Beauty Salon WordPress Theme

  High7.1
• CVE-2025-69153

  WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerability

  designthemes · Trendy Travel

  High7.1
• CVE-2026-27983

  WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability

  designthemes · LMS Elementor Pro

  Critical9.8
• CVE-2026-27390

  WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

  designthemes · WeDesignTech Ultimate Booking Addon

  High8.8