CVE-2023-47770

CVE-2023-47770 concerns Betheme WordPress theme (Muffin Group) with a Missing Authorization vulnerability in versions up to 27.1.1. The issue is described as Broken Access Control / Missing Authorization, enabling privilege escalation for authenticated users (Contributor level and above) to acces...

CVE-2022-45356

The CVE-2022-45356 entry concerns WordPress BeTheme/Muffingroup Betheme with a Missing Authorization vulnerability that affects Betheme up to version 26.6.1. The connected sources identify a Broken Access Control flaw in Betheme (≤ 26.6.1), with remediation guidance to update to a later version. ...

CVE-2022-45352

CVE-2022-45352 concerns the WordPress theme/beTheme (Muffingroup Betheme) with a Missing Authorization / Broken Access Control vulnerability affecting Betheme versions up to 26.6.1. The issue allows unauthorized access to change plugin/theme settings (as described in Patchstack and PT-2024-11703 ...

CVE-2022-45353

CVE-2022-45353 affects the Betheme theme for WordPress, in versions

CVE-2025-0450

CVE-2025-0450 – Betheme (WordPress) stored XSS : Vulnerable in Betheme versions up to 27.6.1 due to insufficient input sanitization and output escaping in the plugin’s custom JS attributes. Exploitation requires authenticated access at contributor level or higher, potentially enabling arbitrary s...

CVE-2022-3861

CVE-2022-3861 affects BeTheme for WordPress. The BeTheme plugin/theme is vulnerable to PHP Object Injection via deserialization of untrusted input in the import paths (import, mfn-items-import-page, mfn-items-import) used by functions mfn_builder_import, mfn_builder_import_page, importdata, impor...

CVE-2022-45351

The CVE-2022-45351 entry concerns Muffingroup BeTheme (WordPress BeTheme premium theme) with a Missing Authorization/Broken Access Control vulnerability identified through Betheme versions up to 26.6.1. Public references from Patchstack and CVE listings align on the issue: unauthorized access tha...

CVE-2025-3077

CVE-2025-3077 (Betheme, WordPress) : Betheme theme for WordPress (versions

CVE-2022-45349

CVE-2022-45349 concerns Muffingroup Betheme (WordPress theme) with a Missing Authorization/Broken Access Control vulnerability affecting versions up to 26.6.1. Multiple connected sources (Patchstack, PT Security, Red Hat, CVE records) indicate unauthenticated or low-privilege access could enable ...

CVE-2022-45077

CVE-2022-45077 affects Betheme theme for WordPress (versions

CVE-2023-39998

CVE-2023-39998 : WordPress Betheme theme

CVE-2024-3998

CVE-2024-3998 (Betheme theme, WordPress) involves a Stored Cross-Site Scripting in Betheme up to version 27.5.6. The issue arises from insufficient input sanitization and output escaping on user-supplied shortcode attributes, enabling an authenticated attacker with contributor-level access or hig...

CVE-2024-2694

CVE-2024-2694 affects Betheme (WordPress theme). It allows PHP Object Injection via deserialization of untrusted input stored in the mfn-page-items post meta, impacting all versions up to 27.5.6. Exploitation requires authentication at contributor level or higher. The description notes that there...

CVE-2024-5567

Betheme (WordPress theme)

CVE-2022-45363

Affected software: Muffingroup Betheme theme for WordPress (versions up to 26.6.1). The issue is a Stored Cross‑Site Scripting (XSS) vulnerability in subscriber+ context, caused by insufficient sanitization/escaping of user input in the theme. Impact as stated: XSS could be triggered by authentic...

CVE-2023-29101

The CVE-2023-29101 entry covers Betheme (Muffingroup Betheme) WordPress theme versions ≤ 26.7.5 with an unauthenticated Reflected XSS due to insufficient input sanitization/escaping. Impact per sources is XSS with low impact on confidentiality/integrity and no explicit exploit details in the docs...