Themeinwp

5 CVEs across 6 Themeinwp products. Browse Themeinwp vulnerabilities, severities, and proof-of-concept exploits.

Themeinwp products with known CVEs

ProductCVEs
Booster Extension1
Default Mag1
Demo Import Kit1
Newsxpress1
Social Share With Floating Bar1
Social Share With Floating Bar1
Themeinwp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-10051High7.22025-10-15The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1…
CVE-2024-8790Medium6.12024-10-18The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate esc…
CVE-2024-2109Medium5.32024-05-02The Booster Extension plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'booster_extensi…
CVE-2024-31938Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7.
CVE-2024-31386Medium4.32024-04-10Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box…