Skip to content
OpenAdvisories

Product · HashThemes

Total

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-5077

    Total <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Title in Blog Section Image alt Attribute

    The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping when rendering the_title() inside HTML attribute context in the home blog section template. …

    HashThemes Total Web / CMS
  • Medium 4.3
    CVE-2023-27456

    WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

    Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

    HashThemes Total
  • Medium 4.3
    CVE-2024-1771

    Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update

    The Total theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the total_order_sections() function in all versions up to, and including, 2.1.59. This makes it possible for authenticated attackers, with su…

    HashThemes Total Web / CMS