imithemes vulnerabilities

CVEs per yearBy the year they were published

1. 202513
2. 20263

Newest CVEs

• CVE-2014-125133

  NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

  imithemes · NativeChurch

  High8.7
• CVE-2026-27408

  WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability

  imithemes · NativeChurch

  High7.1
• CVE-2026-32518

  WordPress Gaea theme < 3.8 - Reflected Cross Site Scripting (XSS) vulnerability

  imithemes · Gaea

  High7.1
• CVE-2025-6758

  Real Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'

  imithemes · Real Spaces - WordPress Properties Directory Theme

  Critical9.8
• CVE-2025-8218

  Real Spaces - WordPress Properties Directory Theme <= 3.5 - Authenticated (Subscriber+) Privilege Escalation to Administrator via 'change_role_member'

  imithemes · Real Spaces - WordPress Properties Directory Theme

  High8.8
• CVE-2025-39483

  WordPress Eventer plugin < 3.9.9.1 - Content Injection vulnerability

  imithemes · Eventer

  Medium6.5
• CVE-2025-39481

  WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability

  imithemes · Eventer

  Critical9.3
• CVE-2025-39482

  WordPress Eventer plugin < 3.11.4 - Broken Access Control vulnerability

  imithemes · Eventer

  Medium4.3
• CVE-2025-2253

  IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset

  imithemes · IMITHEMES Listing

  Critical9.8
• CVE-2025-0959

  Eventer - WordPress Event & Booking Manager Plugin <= 3.9.9.2 - Authenticated (Subscriber+) SQL Injection via reg_id

  imithemes · Eventer - WordPress Event & Booking Manager Plugin

  High8.8