CactusThemes vulnerabilities
We track 2 vulnerabilities in CactusThemes products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 10, 2026.
2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score
Latest CactusThemes vulnerabilities
- 8.1 High severity
VideoPro: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CactusThemes VideoPro videopro allows PHP Local File Inclusion.This issue affects VideoPro: from n/a through <= 2.3.8.1.
- 7.1 High severity
Gameplan: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CactusThemes Gameplan gameplan allows Reflected XSS.This issue affects Gameplan: from n/a through <= 1.5.10.