Themeinwp
5 CVEs across 6 Themeinwp products. Browse Themeinwp vulnerabilities, severities, and proof-of-concept exploits.
Themeinwp products with known CVEs
Themeinwp CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-10051 | High | 7.2 | 2025-10-15 | The Demo Import Kit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.1… |
CVE-2024-8790 | Medium | 6.1 | 2024-10-18 | The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate esc… |
CVE-2024-2109 | Medium | 5.3 | 2024-05-02 | The Booster Extension plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'booster_extensi… |
CVE-2024-31938 | Medium | 4.3 | 2024-04-15 | Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7. |
CVE-2024-31386 | Medium | 4.3 | 2024-04-10 | Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box… |