2 CVEs in 2 Theode products, including Label Plugins, Language Field. Newest: CVE-2025-12401 (2025-11-04). Severity, EPSS and public exploits for each.
The Label Plugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.5. This is due to missing or incorre…
Cross-Site Request Forgery (CSRF) vulnerability in theode Language Field language-field allows Stored XSS.This issue affects Language Field: from n/a through <…