Skip to content
TrackCVE
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

iThemes vulnerabilities

3 published CVEs name iThemes among the affected products.

All 3 in the listAtom feed of new CVEs
Published CVEs
3
Last 12 months
0
Critical
0
Known exploited
0

Critical 0High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20232
  2. 20251

Newest CVEs

  • CVE-2025-49895

    WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability

    iThemes · ServerBuddy by PluginBuddy.com

    Medium6.5
  • CVE-2022-45825

    WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)

    iThemes · WPComplete

    High7.1
  • CVE-2022-31474

    WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal

    iThemes · BackupBuddy

    High7.5

Products with the most CVEs

  1. BackupBuddy1
  2. ServerBuddy by PluginBuddy.com1
  3. WPComplete1

Most common weaknesses

  1. CWE-22 Path traversal1
  2. CWE-352 Cross-site request forgery (CSRF)1
  3. CWE-79 Cross-site scripting (XSS)1