CactusThemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CactusThemes products: 2 record(s), with severity, exploitation and fixes.

VideoPro 1 Truemag 1

Exploited only (KEV) →

CVE-2025-69178 High · 8.1 CWE-98 Jun 17, 2026

WordPress Truemag theme <= 4.3.14.2 - Local File Inclusion vulnerability

Unauthenticated Local File Inclusion in Truemag <= 4.3.14.2 versions.

CVE-2025-58913 High · 8.1 CWE-98 Apr 10, 2026

WordPress VideoPro theme <= 2.3.8.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclusion.This issue affects VideoPro: from n/a through <= 2.3.8.1.