DesignThemes Core Features vulnerabilities

2 known vulnerabilities in DesignThemes Core Features from DesignThemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  DesignThemes Core Features: Improper Neutralization of Input During Web Page Generation

  CVE-2025-69302Feb 20, 2026DesignThemes

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in designthemes DesignThemes Core Features designthemes-core-features allows Reflected XSS.This issue affects DesignThemes Core Features: from n/a through <= 2.3

• 7.5 High severity

  DesignThemes Core Features: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-13471Mar 5, 2025DesignThemes

  The DesignThemes Core Features plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the dt_process_imported_file function in all versions up to, and including, 4.7. This makes it possible for unauthenticated at