THEMECO Cornerstone vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting THEMECO Cornerstone: 3 record(s), with affected versions and fixes.

CVE-2026-54185 High · 8.5 CWE-89 Jun 17, 2026

WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability

Subscriber SQL Injection in Cornerstone < 7.8.8 versions.

CVE-2026-49113 High · 8.5 CWE-94 Jun 17, 2026

WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerability

Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.

CVE-2025-63072 Medium · 6.5 CWE-79 Dec 9, 2025

WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THEMECO Cornerstone cornerstone allows Stored XSS.This issue affects Cornerstone: from n/a through <= 7.7.3.