Skip to content
OpenAdvisories

Vendor

Design themes

47 known vulnerabilities.

Products

LMS 4 DesignThemes Core Features 3 Reservation Plugin 2 WeDesignTech Ultimate Booking Addon 2 Trendy Travel 1 Pet World 1 DesignThemes Booking Manager 1 Invico - WordPress Consulting Business Theme 1 DesignThemes Portfolio Addon 1 Vivagh 1 DesignThemes LMS 1 VEDA - MultiPurpose WordPress Theme 1 Kids Life | Children School WordPress 1 HomeFix Elementor Portfolio 1 Kriya 1 WeDesignTech Portfolio 1 Whistle - Sports Club 1 VEDA 1 DT LMS – elearning, WordPress LMS Plugin 1 DesignThemes LMS Addon 1 Visual Art | Gallery WordPress Theme 1 Finance Consultant 1 DesignThemes Core 1 Red Art 1 Solar Energy 1 Kids Zone - Children WordPress Theme 1 SpaLab | Beauty Salon WordPress Theme 1 OneLife 1 Single Property 1 Dental Clinic 1 DesignThemes Directory Addon 1 Crafts & Arts 1 DesignThemes Portfolio 1 Knowledge Base 1 Triss 1 Ofiz - WordPress Business Consulting Theme 1 Fitness Zone WordPress Theme 1 Kids Heaven 1 LMS Elementor Pro 1 Insurance 1
All Critical High Medium Low Exploited only Public exploit

47 results · Feed

  • High 7.1
    CVE-2025-52799

    WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes LMS lms allows Reflected XSS.This issue affects LMS: from n/a through <= 9.2.

    Design themes LMS
  • High 8.8
    CVE-2025-31924

    WordPress Crafts & Arts theme <= 2.5 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in designthemes Crafts & Arts crafts-and-arts allows Object Injection.This issue affects Crafts & Arts: from n/a through <= 2.5.

    Design themes Crafts & Arts
  • High 8.8
    CVE-2025-32284

    WordPress Pet World theme <= 2.8 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in designthemes Pet World petsworld allows Object Injection.This issue affects Pet World: from n/a through <= 2.8.

    Design themes Pet World
  • High 8.8
    CVE-2025-32293

    WordPress Finance Consultant theme <= 2.8 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in designthemes Finance Consultant finance allows Object Injection.This issue affects Finance Consultant: from n/a through <= 2.8.

    Design themes Finance Consultant
  • Medium 6.4
    CVE-2025-0845

    DesignThemes Core Features <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The DesignThemes Core Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl…

    Design themes DesignThemes Core Features Web / CMS
  • High 7.5
    CVE-2024-13471

    DesignThemes Core Features <= 4.7 - Missing Authorization to Unauthenticated Arbitrary File Read via dt_process_imported_file

    The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dt_process_imported_file function in all versions up to, and including, 4.7. This makes it possible for unauthenticated a…

    Design themes DesignThemes Core Features Web / CMS
  • Critical 9.8
    CVE-2024-13787

    VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection

    The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2 via deserialization of untrusted input in the 'veda_backup_and_restore_action' function. This makes it possible for aut…

    Design themes VEDA - MultiPurpose WordPress Theme Web / CMS