CVE-2025-7726

The7 theme for WordPress (

CVE-2024-5451

CVE-2024-5451 : The7 WordPress theme is vulnerable to a Stored Cross-Site Scripting (XSS) via the url attribute in the Icon and Heading widgets, affecting all versions up to and including 11.13.0. Exploitation requires authentication at contributor level or higher, enabling injection of scripts t...