ThemeSphere vulnerabilities
We track 2 vulnerabilities in ThemeSphere products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest ThemeSphere vulnerabilities
- 7.5 High severity
SmartMag: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeSphere SmartMag smart-mag allows PHP Local File Inclusion.This issue affects SmartMag: from n/a through <= 10.3.0.
- 7.5 High severity
SmartMag: Missing Authorization
Insertion of Sensitive Information into Log File vulnerability in ThemeSphere SmartMag smartmag-responsive-retina-wordpress-magazine.This issue affects SmartMag: from n/a through < 10.1.0.