themeinwp vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20251

Newest CVEs

• CVE-2025-10051

  Demo Import Kit <= 1.1.0 - Authenticated (Admin+) Arbitrary File Upload

  themeinwp · Demo Import Kit

  High7.2
• CVE-2024-8790

  Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting

  themeinwp · Social Share With Floating Bar

  Medium6.1
• CVE-2024-2109

  Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display

  themeinwp · Booster Extension

  Medium5.3
• CVE-2024-31938

  WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

  Themeinwp · NewsXpress

  Medium4.3
• CVE-2024-31386

  Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

  Hidekazu Ishikawa · X-T9

  Medium4.3