Desertthemes

6 CVEs across 4 Desertthemes products. Browse Desertthemes vulnerabilities, severities, and proof-of-concept exploits.

Desertthemes products with known CVEs

ProductCVEs
Newsmash3
Corpiva1
Newsmunch1
Softme1
Desertthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32344Medium4.32026-03-13Cross-Site Request Forgery (CSRF) vulnerability in desertthemes Corpiva corpiva allows Cross Site Request Forgery.This issue affects Corpiva: from n/a through…
CVE-2024-56208Medium6.52026-02-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This iss…
CVE-2025-58817Medium4.32025-09-05Missing Authorization vulnerability in desertthemes SoftMe softme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects So…
CVE-2024-37441Medium4.32025-01-02Cross-Site Request Forgery (CSRF) vulnerability in desertthemes NewsMash newsmash allows Cross Site Request Forgery.This issue affects NewsMash: from n/a throu…
CVE-2024-10849Medium6.42024-12-06The NewsMash theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 1.0.71 due to…
CVE-2024-10848Medium6.42024-12-05The NewsMunch theme for WordPress is vulnerable to Stored Cross-Site Scripting via a malicious display name in all versions up to, and including, 1.0.35 due to…