Cherryframework vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Cherryframework products: 1 record(s), with severity, exploitation and fixes.

Cherry Framework Themes 1

Exploited only (KEV) →

CVE-2018-25437 High · 7.5 CWE-306 Jun 15, 2026

WordPress CherryFramework Themes 3.1.4 Backup File Download

WordPress CherryFramework Themes 3.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to download sensitive backup files by accessing the download_backup.php endpoint. Attackers can directly access the download_backup.php script in the admin/data_management directory to obtain ZIP archives containing the entire wp-content/themes directory contents.