Skip to content
OpenAdvisories

Vendor

Design themes

47 known vulnerabilities.

Products

LMS 4 DesignThemes Core Features 3 Reservation Plugin 2 WeDesignTech Ultimate Booking Addon 2 Trendy Travel 1 Pet World 1 DesignThemes Booking Manager 1 Invico - WordPress Consulting Business Theme 1 DesignThemes Portfolio Addon 1 Vivagh 1 DesignThemes LMS 1 VEDA - MultiPurpose WordPress Theme 1 Kids Life | Children School WordPress 1 HomeFix Elementor Portfolio 1 Kriya 1 WeDesignTech Portfolio 1 Whistle - Sports Club 1 VEDA 1 DT LMS – elearning, WordPress LMS Plugin 1 DesignThemes LMS Addon 1 Visual Art | Gallery WordPress Theme 1 Finance Consultant 1 DesignThemes Core 1 Red Art 1 Solar Energy 1 Kids Zone - Children WordPress Theme 1 SpaLab | Beauty Salon WordPress Theme 1 OneLife 1 Single Property 1 Dental Clinic 1 DesignThemes Directory Addon 1 Crafts & Arts 1 DesignThemes Portfolio 1 Knowledge Base 1 Triss 1 Ofiz - WordPress Business Consulting Theme 1 Fitness Zone WordPress Theme 1 Kids Heaven 1 LMS Elementor Pro 1 Insurance 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-27983

    WordPress LMS Elementor Pro plugin <= 1.0.4 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in designthemes LMS Elementor Pro lms-elementor-pro allows Privilege Escalation.This issue affects LMS Elementor Pro: from n/a through <= 1.0.4.

    Design themes LMS Elementor Pro
  • Critical 9.8
    CVE-2026-27389

    WordPress WeDesignTech Ultimate Booking Addon plugin <= 1.0.1 - Account Takeover vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in designthemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Authentication Abuse.This issue affects WeDesignTech Ultimate Booking Addon: from n/a through…

    Design themes WeDesignTech Ultimate Booking Addon
  • Critical 9.8
    CVE-2025-13542

    DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation

    The DesignThemes LMS plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.4. This is due to the 'dtlms_register_user_front_end' function not restricting what user roles a user can register with. This makes it po…

    Design themes DesignThemes LMS Web / CMS
  • Critical 9.3
    CVE-2025-52833

    WordPress LMS theme <= 9.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in designthemes LMS lms allows SQL Injection.This issue affects LMS: from n/a through <= 9.2.

    Design themes LMS
  • Critical 9.8
    CVE-2024-13787

    VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection

    The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2 via deserialization of untrusted input in the 'veda_backup_and_restore_action' function. This makes it possible for aut…

    Design themes VEDA - MultiPurpose WordPress Theme Web / CMS