CVE Intelligence

THEMECO vulnerabilities

🔔 Create alert RSS

Published CVEs affecting THEMECO products: 3 record(s), with severity, exploitation and fixes.

Cornerstone 3

Exploited only (KEV) →

CVE-2026-54185 High · 8.5 CWE-89 Jun 17, 2026
WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability
Subscriber SQL Injection in Cornerstone < 7.8.8 versions.
CVE-2026-49113 High · 8.5 CWE-94 Jun 17, 2026
WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerability
Subscriber Arbitrary Code Execution in Cornerstone < 7.8.8 versions.
CVE-2025-63072 Medium · 6.5 CWE-79 Dec 9, 2025
WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in THEMECO Cornerstone cornerstone allows Stored XSS.This issue affects Cornerstone: from n/a through <= 7.7.3.