Skip to content
OpenAdvisories

Vendor

KlbTheme

6 known vulnerabilities.

Products

Total Donations 3 Cosmetsy theme (core plugin) 1 Partdo theme (core plugin) 1 Bacola theme (core plugin) 1 Medibazar theme (core plugin) 1 Furnob theme (core plugin) 1 Clotya theme (core plugin) 1 Machic Core 1 Clotya theme 1 Cosmetsy theme 1 Furnob theme 1 Bacola theme 1 Partdo theme 1 Medibazar theme 1 Machic theme 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-94159

    WordPress Total Donations plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Total Donations totaldonations allows Stored XSS.This issue affects Total Donations: from n/a through 2.0.5.

    KlbTheme Total Donations
  • High 7.1
    CVE-2023-49186

    WordPress Machic Core plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in KlbTheme Machic Core allows DOM-Based XSS.This issue affects Machic Core: from n/a through 1.2.6.

    KlbTheme Machic Core
  • High 7.1
    CVE-2023-49839

    Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in KlbTheme Cosmetsy theme (core plugin), KlbTheme Partdo theme (core plugin), KlbTheme Bacola theme (core plugin), KlbTheme Medibazar theme (core plugin), KlbT…

    KlbTheme Furnob theme (core plugin) Partdo theme (core plugin) Medibazar theme (core plugin)