Skip to content
OpenAdvisories

Vendor

Jthemes

13 known vulnerabilities.

Products

xSmart 4 Genemy 3 Prestige 2 Exzo 1 Sale! Immigration law, Visa services support, Migration Agent Consulting 1 imEvent 1 Themebox - Digital Products Ecommerce 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.8
    CVE-2025-69138

    WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability

    Subscriber Privilege Escalation in Genemy <= 1.6.6 versions.

    Jthemes Genemy
  • High 7.1
    CVE-2025-52747

    WordPress Themebox - Digital Products Ecommerce theme <= 1.4.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Themebox - Digital Products Ecommerce allows Reflected XSS. This issue affects Themebox - Digital Products Ecommerce: from n/a through 1.4.2.

    Jthemes Themebox - Digital Products Ecommerce
  • High 7.5
    CVE-2025-69393

    WordPress Exzo theme <= 1.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jthemes Exzo exzo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Exzo: from n/a through <= 1.2.4.

    Jthemes Exzo
  • High 7.1
    CVE-2025-69330

    WordPress Prestige theme < 1.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes Prestige prestige allows Reflected XSS.This issue affects Prestige: from n/a through < 1.4.1.

    Jthemes Prestige
  • High 7.1
    CVE-2025-50006

    WordPress xSmart theme <= 1.2.9.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jthemes xSmart xsmart allows Reflected XSS.This issue affects xSmart: from n/a through <= 1.2.9.4.

    Jthemes xSmart
  • High 8.8
    CVE-2025-50007

    WordPress xSmart theme <= 1.2.9.4 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Jthemes xSmart xsmart allows Privilege Escalation.This issue affects xSmart: from n/a through <= 1.2.9.4.

    Jthemes xSmart
  • High 8.8
    CVE-2025-59134

    WordPress Sale! Immigration law, Visa services support, Migration Agent Consulting theme <= 1.5.8 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: fr…

    Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting