Sparklewpthemes
12 CVEs across 12 Sparklewpthemes products. Browse Sparklewpthemes vulnerabilities, severities, and proof-of-concept exploits.
Sparklewpthemes products with known CVEs
Sparklewpthemes CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-25394 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in sparklewpthemes Fitness FSE fitness-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2026-25393 | Medium | 4.3 | 2026-02-19 | Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a… |
CVE-2025-62961 | Medium | 5.4 | 2025-12-18 | Missing Authorization vulnerability in sparklewpthemes Sparkle FSE sparkle-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This iss… |
CVE-2025-62960 | Medium | 5.4 | 2025-12-18 | Missing Authorization vulnerability in sparklewpthemes Construction Light construction-light allows Exploiting Incorrectly Configured Access Control Security L… |
CVE-2025-7058 | Medium | 6.4 | 2025-12-13 | The Kingcabs theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.1.9… |
CVE-2025-54680 | Medium | 6.5 | 2025-08-14 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Stored X… |
CVE-2025-5587 | Medium | 6.4 | 2025-07-29 | The Appzend theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.2.6… |
CVE-2025-5529 | Medium | 6.4 | 2025-07-26 | The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to… |
CVE-2025-50033 | Medium | 6.5 | 2025-06-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Fitness Park fitness-park allows DOM-Base… |
CVE-2025-50030 | Medium | 6.5 | 2025-06-20 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Spark Multipurpose spark-multipurpose all… |
CVE-2025-49970 | Medium | 4.3 | 2025-06-20 | Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog hello-fse-blog allows Exploiting Incorrectly Configured Access Control Security Levels.Th… |
CVE-2024-6120 | Medium | 6.5 | 2024-06-22 | The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multi… |