Skip to content
OpenAdvisories
High · 7.1 CVE-2025-68839 EUVD-2026-4006GHSA-6h74-r6p3-8hvh

WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Remi Corson Product: Easy Theme Options

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through <= 1.0.

Affected products

VendorProductAffectedFixed
Remi Corson Easy Theme Options ≤ 1.0 —

References