Skip to content
OpenAdvisories

Vendor

Ex-Themes

9 known vulnerabilities.

Products

WP Timeline – Vertical and Horizontal timeline plugin 3 WooCommerce Food - Restaurant Menu & Food ordering 1 WooTour 1 WP Food ordering and Restaurant Menu 1 WP Food 1 WooEvents 1 WooEvents - Calendar and Event Booking 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.1
    CVE-2025-54722

    WordPress WooTour plugin <= 3.6.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WooTour woo-tour allows Reflected XSS.This issue affects WooTour: from n/a through <= 3.6.3.

    Ex-Themes WooTour
  • High 8.1
    CVE-2025-31040

    WordPress WP Food ordering and Restaurant Menu plugin <= 2.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Exthemes WP Food ordering and Restaurant Menu wp-food allows PHP Local File Inclusion.This issue affects WP Food ordering and Restaurant M…

    Ex-Themes WP Food ordering and Restaurant Menu
  • High 7.3
    CVE-2024-13792

    WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

    The WooCommerce Food - Restaurant Menu & Food ordering plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 3.3.2. This is due to the software allowing users to execute an action that does not properly vali…

    Ex-Themes WooCommerce Food - Restaurant Menu & Food ordering Web / CMS
  • High 7.1
    CVE-2024-47322

    WordPress WP Timeline plugin <= 3.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines allows Reflected XSS.This issue affects WP Timeline – Vertical and Horizontal ti…

    Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin
  • High 7.5
    CVE-2024-47324

    WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

    Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through <= 3.6.7.

    Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin
  • High 8.1
    CVE-2024-47323

    WordPress WP Timeline plugin <= 3.6.7 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal time…

    Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin