Buddhathemes
5 CVEs across 4 Buddhathemes products. Browse Buddhathemes vulnerabilities, severities, and proof-of-concept exploits.
Buddhathemes products with known CVEs
Buddhathemes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-27096 | High | 8.1 | 2026-03-19 | Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects Colo… |
CVE-2025-69340 | High | 7.5 | 2026-03-05 | Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Confi… |
CVE-2025-13563 | Critical | 9.8 | 2026-02-19 | The Lizza LMS Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'lizza_lms_pro_reg… |
CVE-2025-69341 | Medium | 5.4 | 2026-01-06 | Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Confi… |
CVE-2025-31428 | High | 7.1 | 2025-06-27 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue… |