CVE-2022-3861

The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserialization of untrusted input supplied via the import, mfn-items-import-page, and mfn-items-import parameters passed through the mfn_builder_import, mfn_builder_import_page, imp...

CVE-2022-45363

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme

CVE-2022-45077

Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme