Bulktheme - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2026-02-26.

Products

• Wooexim - 2 CVEs
• Wp Social Meta - 1 CVEs

Newest CVEs of Bulktheme

• CVE-2026-2498 - CVSS 4.4 (medium), 2026-02-26: The WP Social Meta plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.1 due to…
• CVE-2025-1288 - CVSS 6.1 (medium), 2025-05-15: The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow…
• CVE-2025-23944 - CVSS 8.8 (high), 2025-01-22: Deserialization of Untrusted Data vulnerability in bulktheme WOOEXIM wooexim allows Object Injection.This issue affects WOOEXIM: from n/a through <= 5.0.0.
• CVE-2025-22533 - CVSS 7.6 (high), 2025-01-07: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bulktheme WOOEXIM wooexim allows SQL Injection.This…