CVEs we hold for Designthemes
Records whose assigning authority named Designthemes as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-27983WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerabilitydesignthemes LMS Elementor Pro
CVE-2026-27404WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerabilityDesignthemes LMS
CVE-2026-27402WordPress Kids Life | Children School WordPress theme <= 5.2 - Cross Site Scripting (XSS) vulnerabilityDesignthemes Kids Life | Children School WordPress
CVE-2026-27390WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerabilitydesignthemes WeDesignTech Ultimate Booking Addon
CVE-2026-27389WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerabilitydesignthemes WeDesignTech Ultimate Booking Addon
CVE-2026-27388WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerabilityDesignThemes Booking Manager
CVE-2026-27386WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerabilityDesignThemes Directory Addon
CVE-2026-27385WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerabilityDesignThemes Portfolio
CVE-2026-22473WordPress Dental Clinic theme <= 3.7 - PHP Object Injection vulnerabilitydesignthemes Dental Clinic
CVE-2026-11355DT LMS <= 1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Modification via Multiple AJAX…designthemes DT LMS – elearning, WordPress LMS Plugin
CVE-2025-69302WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerabilityDesignThemes Core Features
CVE-2025-69155WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerabilityDesignthemes Fitness Zone WordPress Theme
CVE-2025-69154WordPress SpaLab | Beauty Salon WordPress Theme theme <= 6.7 - Cross Site Scripting (XSS) vulnerabilitydesignthemes SpaLab | Beauty Salon WordPress Theme
CVE-2025-69153WordPress Trendy Travel theme <= 6.7 - Reflected Cross Site Scripting (XSS) vulnerabilitydesignthemes Trendy Travel
CVE-2025-69095WordPress Reservation Plugin plugin <= 1.7 - Settings Change vulnerabilitydesignthemes Reservation Plugin
CVE-2025-69002WordPress OneLife theme <= 3.9 - PHP Object Injection vulnerabilitydesignthemes OneLife
CVE-2025-68982WordPress DesignThemes LMS Addon plugin <= 2.6 - Broken Access Control vulnerabilityDesignThemes LMS Addon
CVE-2025-68981WordPress HomeFix Elementor Portfolio plugin <= 1.0.1 - Broken Access Control vulnerabilitydesignthemes HomeFix Elementor Portfolio
CVE-2025-68980WordPress WeDesignTech Portfolio plugin <= 1.0.2 - Broken Access Control vulnerabilitydesignthemes WeDesignTech Portfolio
CVE-2025-68978WordPress DesignThemes Core plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityDesignThemes Core
CVE-2025-68977WordPress DesignThemes Portfolio Addon plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityDesignThemes Portfolio Addon
CVE-2025-67619WordPress Kids Heaven theme <= 3.2 - PHP Object Injection vulnerabilitydesignthemes Kids Heaven
CVE-2025-64221WordPress Reservation Plugin plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilitydesignthemes Reservation Plugin
CVE-2025-60234WordPress Single Property theme <= 2.8 - PHP Object Injection vulnerabilitydesignthemes Single Property
CVE-2025-60228WordPress Knowledge Base theme <= 2.9 - PHP Object Injection vulnerabilitydesignthemes Knowledge Base
CVE-2025-53423WordPress Triss theme <= 2.6 - Cross Site Scripting (XSS) vulnerabilitydesignthemes Triss
CVE-2025-52828WordPress Red Art theme <= 3.8 - PHP Object Injection Vulnerabilitydesignthemes Red Art
CVE-2025-52799WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerabilitydesignthemes LMS
CVE-2025-32293WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerabilitydesignthemes Finance Consultant
CVE-2025-32284WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerabilitydesignthemes Pet World
CVE-2025-32283WordPress Solar Energy theme <= 3.5 - PHP Object Injection Vulnerabilitydesignthemes Solar Energy
CVE-2025-31924WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerabilitydesignthemes Crafts & Arts
CVE-2025-31634WordPress Insurance theme <= 3.5 - PHP Object Injection Vulnerabilitydesignthemes Insurance
CVE-2025-31427WordPress Invico - WordPress Consulting Business Theme <= 1.9 - Cross Site Scripting (XSS) Vulnerabilitydesignthemes Invico - WordPress Consulting Business Theme
CVE-2025-31422WordPress Visual Art | Gallery WordPress Theme <= 2.4 - PHP Object Injection Vulnerabilitydesignthemes Visual Art | Gallery WordPress Theme
CVE-2025-31072WordPress Ofiz - Business Consulting Theme plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerabilitydesignthemes Ofiz - WordPress Business Consulting Theme
CVE-2025-0845DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeDesignThemes Core Features
CVE-2024-13787VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injectiondesignthemes VEDA - MultiPurpose WordPress Theme
CVE-2024-13471DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via…DesignThemes Core Features
44 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.