BuddhaThemes vulnerabilities
We track 6 vulnerabilities in BuddhaThemes products across 6 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2026.
Latest BuddhaThemes vulnerabilities
- 8.8 High severity
ColorFolio: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio colorit allows Object Injection.This issue affects ColorFolio: from n/a through 1.3.
- 8.8 High severity
Neo | Barber Shop WordPress Theme: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BuddhaThemes Neo | Barber Shop WordPress Theme neocut allows Object Injection.This issue affects Neo | Barber Shop WordPress Theme: from n/a through 3.5.
- 8.1 High severity
ColorFolio - Freelance Designer WordPress Theme: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in BuddhaThemes ColorFolio - Freelance Designer WordPress Theme allows Object Injection.This issue affects ColorFolio - Freelance Designer WordPress Theme: from n/a through 1.3.
- 7.5 High severity
WeDesignTech Ultimate Booking Addon: Missing Authorization
Missing Authorization vulnerability in BuddhaThemes WeDesignTech Ultimate Booking Addon wedesigntech-ultimate-booking-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Ultimate Booking Addon: from n/a
- 9.8 Critical severity
Lizza LMS Pro: Improper Privilege Management
The Lizza LMS Pro plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3. This is due to the 'lizza_lms_pro_register_user_front_end' function not restricting what user roles a user can register with. This makes i
- 7.1 High severity
HYDRO: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through <= 2.8.