Dream-Theme vulnerabilities
9 published CVEs name Dream-Theme among the affected products.
- 9Published CVEs9 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-6646
The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter
Dream-Theme · The7 — Website and eCommerce Builder for WordPress
Medium6.4 - CVE-2025-63076
WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability
Dream-Theme · The7 Elements
High7.5 - CVE-2025-63074
WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability
Dream-Theme · The7
High7.5 - CVE-2025-63073
WordPress The7 theme < 12.9.0 - Cross Site Scripting (XSS) vulnerability
Dream-Theme · The7
Medium6.5 - CVE-2025-11897
The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css'
Dream-Theme · The7 — Website and eCommerce Builder for WordPress
Medium6.4 - CVE-2025-7726
The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes
Dream-Theme · The7 — Website and eCommerce Builder for WordPress
Medium6.4 - CVE-2024-5451
The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute
Dream-Theme · The7 — Website and eCommerce Builder for WordPress
Medium6.4 - CVE-2023-32123
WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)
Dream-Theme · The7
Medium6.1 - CVE-2023-29100
WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
Dream-Theme · The7
High7.1