Vulnerabilidades de ThemeSphere

🔔 Criar alerta RSS

CVEs publicadas que afetam produtos de ThemeSphere: 2 registro(s), com severidade, exploração e correções.

Somente exploradas (KEV) →

CVE-2025-64216 Alta · 7.5 CWE-98 29/10/2025

WordPress SmartMag theme <= 10.3.0 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0.

CVE-2025-64204 Média · 6.5 CWE-79 29/10/2025

WordPress SmartMag theme <= 10.3.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeSphere SmartMag smart-mag allows Stored XSS.This issue affects SmartMag: from n/a through <= 10.3.1.