CVE Intelligence

ThemeSphere vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ThemeSphere products: 2 record(s), with severity, exploitation and fixes.

SmartMag 2

Exploited only (KEV) →

CVE-2025-64216 High · 7.5 CWE-98 Oct 29, 2025
WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0.
CVE-2025-64204 Medium · 6.5 CWE-79 Oct 29, 2025
WordPress SmartMag theme <= 10.3.1 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeSphere SmartMag smart-mag allows Stored XSS.This issue affects SmartMag: from n/a through <= 10.3.1.