Jthemes

13 CVEs across 7 Jthemes products. Browse Jthemes vulnerabilities, severities, and proof-of-concept exploits.

Jthemes products with known CVEs

ProductCVEs
Xsmart4
Genemy3
Prestige2
Exzo1
Imevent1
Sale! Immigration Law, Visa Services Support, Migration Agent Consulting1
Themebox - Digital Products Ecommerce1
Jthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-69138High8.82026-06-17Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.
CVE-2025-69137Medium6.52026-06-17Subscriber Broken Access Control in Genemy <= 1.6.6 versions.
CVE-2025-52747High7.12026-05-27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Refl…
CVE-2025-69393High7.52026-02-20Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from…
CVE-2025-69330High7.12026-02-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Prestige prestige allows Reflected XSS.This issue…
CVE-2025-69329Critical9.82026-02-20Deserialization of Untrusted Data vulnerability in Jthemes Prestige prestige allows Object Injection.This issue affects Prestige: from n/a through < 1.4.1.
CVE-2025-54002Medium6.52026-01-22Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart…
CVE-2025-50007High8.82026-01-22Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through <= 1.2.9.4.
CVE-2025-50006High7.12026-01-22Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue aff…
CVE-2025-59138Medium4.92025-12-31Server-Side Request Forgery (SSRF) vulnerability in Jthemes Genemy genemy allows Server Side Request Forgery.This issue affects Genemy: from n/a through <= 1.6…
CVE-2025-59134High8.82025-12-18Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escala…
CVE-2025-58243Medium5.32025-11-06Missing Authorization vulnerability in Jthemes imEvent imevent allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects imEvent: from…
CVE-2025-62936Medium4.32025-10-27Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects x…