Peregrinethemes vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Peregrinethemes products: 2 record(s), with severity, exploitation and fixes.

Shopwell 1 Hester Core 1

Exploited only (KEV) →

CVE-2026-57656 Medium · 5.9 CWE-79 Jun 26, 2026

WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

CVE-2026-25333 Medium · 5.3 CWE-862 Feb 19, 2026

WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability

Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopwell: from n/a through <= 1.0.11.