ModelTheme vulnerabilities
We track 3 vulnerabilities in ModelTheme products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on February 20, 2026.
Latest ModelTheme vulnerabilities
- 7.5 High severity
ModelTheme Framework: Missing Authorization
Missing Authorization vulnerability in modeltheme ModelTheme Framework modeltheme-framework allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ModelTheme Framework: from n/a through < 2.0.0.
- 8.8 High severity
ModelTheme Addons for WPBakery and Elementor: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in modeltheme ModelTheme Addons for WPBakery and Elementor modeltheme-addons-for-wpbakery allows Object Injection.This issue affects ModelTheme Addons for WPBakery and Elementor: from n/a through < 1.5.6.
- 8.8 High severity
QRMenu Restaurant QR Menu Lite: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in ModelTheme QRMenu Restaurant QR Menu Lite qrmenu-lite allows Object Injection.This issue affects QRMenu Restaurant QR Menu Lite: from n/a through <= 1.0.4.