CVE Intelligence

ThemeGoods Craft vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting ThemeGoods Craft: 1 record(s), with affected versions and fixes.

CVE-2025-68538 High · 7.1 CWE-79 Jan 22, 2026
WordPress Craft | Coffee Shop Cafe Restaurant WordPress theme <= 2.3.6 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGoods Craft craftcoffee allows DOM-Based XSS.This issue affects Craft: from n/a through <= 2.3.6.