Sparklewpthemes

12 CVEs across 12 Sparklewpthemes products. Browse Sparklewpthemes vulnerabilities, severities, and proof-of-concept exploits.

Sparklewpthemes products with known CVEs

ProductCVEs
Appzend1
Blogger Buzz1
Construction Light1
Educenter1
Fitness Fse1
Fitness Park1
Hello Fse1
Hello Fse Blog1
Kingcabs1
Sparkle Demo Importer1
Sparkle Fse1
Spark Multipurpose1
Sparklewpthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25394Medium4.32026-02-19Missing Authorization vulnerability in sparklewpthemes Fitness FSE fitness-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2026-25393Medium4.32026-02-19Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2025-62961Medium5.42025-12-18Missing Authorization vulnerability in sparklewpthemes Sparkle FSE sparkle-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This iss…
CVE-2025-62960Medium5.42025-12-18Missing Authorization vulnerability in sparklewpthemes Construction Light construction-light allows Exploiting Incorrectly Configured Access Control Security L…
CVE-2025-7058Medium6.42025-12-13The Kingcabs theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.1.9…
CVE-2025-54680Medium6.52025-08-14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Blogger Buzz blogger-buzz allows Stored X…
CVE-2025-5587Medium6.42025-07-29The Appzend theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.2.6…
CVE-2025-5529Medium6.42025-07-26The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to…
CVE-2025-50033Medium6.52025-06-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Fitness Park fitness-park allows DOM-Base…
CVE-2025-50030Medium6.52025-06-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sparklewpthemes Spark Multipurpose spark-multipurpose all…
CVE-2025-49970Medium4.32025-06-20Missing Authorization vulnerability in sparklewpthemes Hello FSE Blog hello-fse-blog allows Exploiting Incorrectly Configured Access Control Security Levels.Th…
CVE-2024-6120Medium6.52024-06-22The Sparkle Demo Importer plugin for WordPress is vulnerable to unauthorized database reset and demo data import due to a missing capability check on the multi…