Skip to content
OpenAdvisories

Vendor

SeventhQueen

11 known vulnerabilities.

Products

Kleo 3 Sweet Date 2 K Elements 2 BuddyApp 1 Typer Core 1 SweetDate Core 1 Restrictions for BuddyPress 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.1
    CVE-2025-69140

    WordPress SweetDate Core plugin < 1.1.5 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in SweetDate Core < 1.1.5 versions.

    SeventhQueen SweetDate Core
  • High 7.1
    CVE-2026-22465

    WordPress BuddyApp theme <= 1.9.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen BuddyApp buddyapp allows Reflected XSS.This issue affects BuddyApp: from n/a through <= 1.9.2.

    SeventhQueen BuddyApp
  • High 7.5
    CVE-2025-64363

    WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Local File Inclusion.This issue affects Kleo: from n/a through < 5.5.0.

    SeventhQueen Kleo
  • High 7.1
    CVE-2024-56209

    WordPress Kleo theme < 5.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen Kleo kleo allows Reflected XSS.This issue affects Kleo: from n/a through < 5.4.4.

    SeventhQueen Kleo