High · 7.1 CVE-2025-69155 EUVD-2025-210407GHSA-8mp7-55hp-m92p

WordPress Fitness Zone WordPress Theme theme <= 5.7 - Cross Site Scripting (XSS) vulnerability

Published Jul 2, 2026 · Updated Jul 2, 2026 · Assigned by Patchstack

Vendor: Design themes Product: Fitness Zone WordPress Theme Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Fitness Zone WordPress Theme <= 5.7 versions.

Affected products

Vendor	Product	Affected	Fixed
Designthemes	Fitness Zone WordPress Theme	≤ 5.7	—

References

https://patchstack.com/database/wordpress/theme/fitnesszone/vulnerability/wordpress-fitness-zone-wordpress-theme-theme-5-7-cross-site-scripting-xss-vulnerability?_s_id=cve vdb-entry