Skip to content
OpenAdvisories

Product · Jthemes

xSmart

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-54002

    WordPress xSmart theme <= 1.2.9.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Jthemes xSmart xsmart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects xSmart: from n/a through <= 1.2.9.4.

    Jthemes xSmart
  • Medium 4.3
    CVE-2025-62936

    WordPress xSmart theme <= 1.2.9.4 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Jthemes xSmart xsmart allows Code Injection.This issue affects xSmart: from n/a through <= 1.2.9.4.

    Jthemes xSmart