Skip to content
OpenAdvisories

Vendor

designingmedia

6 known vulnerabilities.

Products

Hostiko 3 Energox 1 Instant VA 1 Eleganzo 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.7
    CVE-2026-24969

    WordPress Instant VA theme <= 1.0.1 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Instant VA instantva allows Path Traversal.This issue affects Instant VA: from n/a through <= 1.0.1.

    designingmedia Instant VA
  • High 7.7
    CVE-2026-24970

    WordPress Energox theme <= 1.2 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in designingmedia Energox energox allows Path Traversal.This issue affects Energox: from n/a through <= 1.2.

    designingmedia Energox
  • High 7.1
    CVE-2025-67949

    WordPress Hostiko theme < 94.3.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 94.3.6.

    designingmedia Hostiko
  • High 7.1
    CVE-2025-27014

    WordPress Hostiko Theme < 30.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designingmedia Hostiko hostiko allows Reflected XSS.This issue affects Hostiko: from n/a through < 30.1.

    designingmedia Hostiko
  • High 7.5
    CVE-2025-27015

    WordPress Hostiko Theme < 30.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in designingmedia Hostiko hostiko allows PHP Local File Inclusion.This issue affects Hostiko: from n/a through < 30.1.

    designingmedia Hostiko