Themepassion

6 CVEs across 4 Themepassion products. Browse Themepassion vulnerabilities, severities, and proof-of-concept exploits.

Themepassion products with known CVEs

ProductCVEs
Support Ticket2
Ultra Portfolio2
Legacy Admin1
Ultra Wordpress Admin1
Themepassion CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-22524High7.12026-03-25Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Legacy Admin legacy-admin allows Reflected X…
CVE-2026-22523High7.12026-03-25Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra WordPress Admin ultra-admin allows Ref…
CVE-2025-69180High8.52026-01-22Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Blind…
CVE-2025-49424High7.12025-08-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Support Ticket support-ticket allows Reflect…
CVE-2025-49422Critical9.82025-08-20Incorrect Privilege Assignment vulnerability in themepassion Support Ticket support-ticket allows Privilege Escalation.This issue affects Support Ticket: from…
CVE-2025-49420High7.12025-08-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themepassion Ultra Portfolio ultra-portfolio allows Refle…