Ex-Themes
8 CVEs across 6 Ex-Themes products. Browse Ex-Themes vulnerabilities, severities, and proof-of-concept exploits.
Ex-Themes products with known CVEs
Ex-Themes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-32440 | Medium | 5.3 | 2026-03-13 | Missing Authorization vulnerability in Ex-Themes WP Food wp-food allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP… |
CVE-2025-54722 | High | 7.1 | 2025-11-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issu… |
CVE-2025-60121 | Medium | 5.3 | 2025-09-26 | Missing Authorization vulnerability in Ex-Themes WooEvents woo-events allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2024-13792 | High | 7.3 | 2025-02-20 | The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including… |
CVE-2024-47322 | High | 7.1 | 2024-10-06 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline… |
CVE-2024-47324 | High | 7.5 | 2024-10-05 | Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vert… |
CVE-2024-47323 | High | 8.1 | 2024-10-05 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ex-Themes WP Timeline – Vertical and H… |
CVE-2024-8671 | Critical | 9.1 | 2024-09-24 | The WooEvents - Calendar and Event Booking plugin for WordPress is vulnerable to arbitrary file overwrite due to insufficient file path validation in the inc/b… |