Athemes

10 CVEs across 3 Athemes products. Browse Athemes vulnerabilities, severities, and proof-of-concept exploits.

Athemes products with known CVEs

ProductCVEs
Sydney Toolbox5
Athemes Addons For Elementor4
Sydney1
Athemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-8999Medium5.32025-09-17The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all v…
CVE-2025-32158High7.52025-04-10Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Syed Balkhi aThemes Addons for Element…
CVE-2025-22646Medium6.52025-03-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi aThemes Addons for Elementor athemes-addons-f…
CVE-2024-13547Medium6.42025-02-01The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Image Accordion widget in all versions up to, and in…
CVE-2024-51675Medium6.52024-11-09Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Syed Balkhi aThemes Addons for Elementor athemes-addons-f…
CVE-2024-4473Medium6.42024-05-14The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "aThemes: Portfolio" widget in all versions up to, and including…
CVE-2024-4036Medium6.42024-05-02The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in all versions up to, and including, 1.30 due to…
CVE-2024-3208Medium6.42024-04-09The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Filterable Gallery widget in all versions up to, and incl…
CVE-2024-2936Medium6.42024-03-29The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the _id attribute of widgets in all versions up to, and including, 1.2…
CVE-2024-1447Medium6.42024-02-29The Sydney Toolbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's aThemes Slider button element in all versions up to, and…