Skip to content
OpenAdvisories

Vendor

skygroup

14 known vulnerabilities.

Products

Nooni 1 UpStore 1 Loobek 1 Enzy 1 Yobazar 1 Druco 1 MyDecor 1 Reebox 1 Miti 1 Agrofood 1 GoStore 1 MyMedi 1 Sanzo 1 Jaroti 1
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • High 7.1
    CVE-2026-25353

    WordPress Nooni theme < 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through < 1.5.1.

    skygroup Nooni
  • High 7.1
    CVE-2026-25356

    WordPress Yobazar theme < 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from n/a through < 1.6.7.

    skygroup Yobazar
  • High 7.1
    CVE-2026-25354

    WordPress Reebox theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8.

    skygroup Reebox
  • High 7.1
    CVE-2026-25350

    WordPress Miti theme < 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through < 1.5.3.

    skygroup Miti
  • High 7.1
    CVE-2026-25352

    WordPress MyDecor theme < 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from n/a through < 1.5.9.

    skygroup MyDecor
  • High 7.1
    CVE-2026-25349

    WordPress Loobek theme < 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through < 1.5.2.

    skygroup Loobek
  • High 7.1
    CVE-2026-25351

    WordPress MyMedi theme < 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through < 1.7.7.

    skygroup MyMedi
  • High 7.1
    CVE-2026-25304

    WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.

    skygroup Jaroti
  • High 7.1
    CVE-2026-27332

    WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0.

    skygroup Agrofood
  • High 7.1
    CVE-2025-59556

    WordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

    skygroup GoStore
  • High 7.1
    CVE-2025-58964

    WordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

    skygroup Enzy
  • High 7.1
    CVE-2025-48296

    WordPress UpStore <= 1.7.0 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.

    skygroup UpStore
  • High 7.1
    CVE-2025-54055

    WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.

    skygroup Druco