CVE-2026-27386

CVE-2026-27386 is a Missing/Broken Authorization vulnerability affecting the DesignThemes Directory Addon (WordPress plugin) with versions from n/a to 1.8. Multiple sources (NVD, Red Hat, CVE list, AttackKB, PatchStack, vuln enrichment) describe a broken access control issue enabling improper aut...

CVE-2026-27386 WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through = 1.8...

CVE-2026-27385

CVE-2026-27385 is a reflected Cross-Site Scripting (XSS) vulnerability in the WordPress plugin DesignThemes Portfolio (designthemes-portfolio), with the affected range listed as up to version 1.3. The issue is described as Improper Neutralization of Input During Web Page Generation. Public source...

CVE-2026-27386 WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through = 1.8...

CVE-2026-22473

CVE-2026-22473 affects the WordPress theme Dental Clinic (Designthemes) up to version 3.7. It is a Deserialization of Untrusted Data (PHP Object Injection) vulnerability that can be exploited by an authenticated attacker (Subscriber+) and has a high risk profile (CVSS 3.1: 8.8). Current connected...

PT-2026-23205

Name of the Vulnerable Software and Affected Versions Dental Clinic versions through 3.7 Description The software contains a flaw due to deserialization of untrusted data, which allows for object injection. Recommendations Versions prior to and including 3.7 should be updated...

WordPress plugin DesignThemes Booking Manager 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

WordPress plugin DesignThemes Directory Addon 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be added t...

WordPress plugin DesignThemes Portfolio 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application plugin. WordPress...

PT-2026-23261

Missing Authorization vulnerability in designthemes DesignThemes Booking Manager designthemes-booking-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Booking Manager: from n/a through = 2.0...

PT-2026-23259

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Portfolio designthemes-portfolio allows Reflected XSS.This issue affects DesignThemes Portfolio: from n/a through = 1.3...

PT-2026-23273

Name of the Vulnerable Software and Affected Versions LMS Elementor Pro versions through 1.0.4 Description A privilege assignment issue exists in LMS Elementor Pro that could allow for privilege escalation. The issue allows an attacker to gain elevated privileges within the system. Recommendation...

WordPress DesignThemes Portfolio plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes Portfolio versions = 1.3...

WordPress DesignThemes Directory Addon plugin <= 1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes Directory Addon versions = 1.8...

WordPress DesignThemes Booking Manager plugin <= 2.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin DesignThemes Booking Manager versions = 2.0...

CVE-2025-69302

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Reflected XSS.This issue affects DesignThemes Core Features: from n/a through = 2.3...

CVE-2025-69302

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Reflected XSS.This issue affects DesignThemes Core Features: from n/a through = 2.3...

CVE-2025-69302 WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Reflected XSS.This issue affects DesignThemes Core Features: from n/a through = 2.3...

CVE-2025-69302

CVE-2025-69302 is a Reflected XSS in the WordPress plugin DesignThemes Core Features (designthemes-core-features) affecting versions up to 2.3. The CVE description and Red Hat/Wordfence entries confirm cross-site scripting via input during web page generation. Key details from connected docs show...

CVE-2025-69302 WordPress DesignThemes Core Features plugin <= 2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Reflected XSS.This issue affects DesignThemes Core Features: from n/a through = 2.3...