wpweaver vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20252
4. 20263

Newest CVEs

• CVE-2026-54870

  WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability

  wpweaver · Weaver Xtreme Theme Support

  Medium6.5
• CVE-2026-10035

  Turnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection

  wpweaver · Turnkey bbPress by WeaverTheme

  Medium6.6
• CVE-2026-2121

  Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting

  wpweaver · Weaver Show Posts

  Medium4.4
• CVE-2025-22267

  WordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

  wpweaver · Weaver Themes Shortcode Compatibility

  Medium6.5
• CVE-2024-12221

  Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameter

  wpweaver · Turnkey bbPress by WeaverTheme

  Medium6.1
• CVE-2024-4939

  Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode

  wpweaver · Weaver Xtreme Theme Support

  Medium6.4
• CVE-2023-6990

  Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpweaver · Weaver Xtreme

  Medium5.4
• CVE-2023-1404

  Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

  wpweaver · Weaver Show Posts

  Medium6.4
• CVE-2023-1403

  Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

  wpweaver · Weaver Xtreme

  Medium6.4