Skip to content
OpenAdvisories

Vendor

Dream-Theme

9 known vulnerabilities.

Products

The7 — Website and eCommerce Builder for WordPress 4 The7 4 The7 Elements 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-63074

    WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dream-Theme The7 dt-the7 allows PHP Local File Inclusion.This issue affects The7: from n/a through < 12.8.1.1.

    Dream-Theme The7
  • High 7.5
    CVE-2025-63076

    WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Dream-Theme The7 Elements dt-the7-core allows PHP Local File Inclusion.This issue affects The7 Elements: from n/a through <= 2.7.11.

    Dream-Theme The7 Elements
  • High 7.1
    CVE-2023-29100

    WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions.

    Dream-Theme The7