iThemes vulnerabilities
3 published CVEs name iThemes among the affected products.
- 3Published CVEs3 of them scored
- 0Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-49895
WordPress ServerBuddy by PluginBuddy.com plugin <= 1.0.5 - CSRF to PHP Object Injection vulnerability
iThemes · ServerBuddy by PluginBuddy.com
Medium6.5 - CVE-2022-45825
WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)
iThemes · WPComplete
High7.1 - CVE-2022-31474
WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal
iThemes · BackupBuddy
High7.5