Liquidthemes
11 CVEs across 10 Liquidthemes products. Browse Liquidthemes vulnerabilities, severities, and proof-of-concept exploits.
Liquidthemes products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-81769 | High | 8.8 | 2026-09-02 | Incorrect Privilege Assignment vulnerability in LiquidThemes Booking Hub allows Privilege Escalation. This issue affects Booking Hub: from n/a through 1.3.1. |
CVE-2026-32561 | High | 8.8 | 2026-08-24 | Subscriber Privilege Escalation in Booking Hub <= 1.3.0 versions. |
CVE-2026-32560 | High | 8.8 | 2026-08-24 | Subscriber Local File Inclusion in MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator <= 1.4 versions. |
CVE-2026-65582 | High | 7.7 | 2026-08-13 | Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions. |
CVE-2026-25460 | Medium | 6.3 | 2026-03-25 | Missing Authorization vulnerability in LiquidThemes Ave Core ave-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affect… |
CVE-2025-68065 | High | 7.5 | 2025-12-16 | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in LiquidThemes Hub Core allows PHP Local… |
CVE-2025-13380 | Medium | 6.5 | 2025-11-25 | The AI Engine for WordPress: ChatGPT, GPT Content Generator plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0… |
CVE-2025-0951 | Medium | 4.3 | 2025-08-28 | Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpr… |
CVE-2025-30933 | Critical | 10.0 | 2025-07-04 | Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes LogisticsHub logistics-hub allows Upload a Web Shell to a Web Server.This issue a… |
CVE-2025-1093 | Critical | 9.8 | 2025-04-19 | The AIHub theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the generate_image function in all versions up to… |
CVE-2025-26927 | Critical | 10.0 | 2025-04-15 | Unrestricted Upload of File with Dangerous Type vulnerability in LiquidThemes AI Hub aihub allows Upload a Web Shell to a Web Server.This issue affects AI Hub… |