Ex-Themes

8 CVEs across 6 Ex-Themes products. Browse Ex-Themes vulnerabilities, severities, and proof-of-concept exploits.

Ex-Themes products with known CVEs

ProductCVEs
Wp Timeline – Vertical And Horizontal Timeline Plugin3
Woocommerce Food - Restaurant Menu & Food Ordering1
Wooevents1
Wooevents - Calendar And Event Booking1
Wootour1
Wp Food1
Ex-Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-32440Medium5.32026-03-13Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP…
CVE-2025-54722High7.12025-11-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issu…
CVE-2025-60121Medium5.32025-09-26Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect…
CVE-2024-13792High7.32025-02-20The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including…
CVE-2024-47322High7.12024-10-06Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline…
CVE-2024-47324High7.52024-10-05Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vert…
CVE-2024-47323High8.12024-10-05Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ex-Themes WP Timeline – Vertical and H…
CVE-2024-8671Critical9.12024-09-24The WooEvents - Calendar and Event Booking plugin for WordPress is vulnerable to arbitrary file overwrite due to insufficient file path validation in the inc/b…