Themeton vulnerabilities

We track 10 vulnerabilities in Themeton products across 10 products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on June 17, 2026.

10vulnerabilities

8critical

2high

0exploited

9.3average CVSS score

Latest Themeton vulnerabilities

9.8 Critical severity
The Barber Shop: Deserialization of Untrusted Data
CVE-2025-60230Jun 17, 2026Themeton
Deserialization of Untrusted Data vulnerability in Themeton The Barber Shop allows Object Injection. This issue affects The Barber Shop: from n/a through 1.9.
9.8 Critical severity
Consult Aid: Deserialization of Untrusted Data
CVE-2025-67617Jan 22, 2026Themeton
Deserialization of Untrusted Data vulnerability in themeton Consult Aid consultaid allows Object Injection.This issue affects Consult Aid: from n/a through <= 1.4.3.
7.1 High severity
Seven Stars: Improper Neutralization of Input During Web Page Generation
CVE-2025-31067Jun 27, 2025Themeton
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Seven Stars allows Stored XSS. This issue affects Seven Stars: from n/a through 1.4.4.
7.1 High severity
Spare: Improper Neutralization of Input During Web Page Generation
CVE-2025-31638Jun 9, 2025Themeton
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeton Spare allows Reflected XSS. This issue affects Spare: from n/a through 1.7.
9.8 Critical severity
PressGrid - Frontend Publish Reaction &…: Deserialization of Untrusted Data
CVE-2025-31429Jun 9, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton PressGrid - Frontend Publish Reaction & Multimedia Theme allows Object Injection. This issue affects PressGrid - Frontend Publish Reaction & Multimedia Theme: from n/a through 1.3.1.
9.8 Critical severity
PIMP - Creative MultiPurpose: Deserialization of Untrusted Data
CVE-2025-31398Jun 9, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton PIMP - Creative MultiPurpose allows Object Injection. This issue affects PIMP - Creative MultiPurpose: from n/a through 1.7.
9.8 Critical severity
FLAP - Business WordPress Theme: Deserialization of Untrusted Data
CVE-2025-31396Jun 9, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton FLAP - Business WordPress Theme allows Object Injection. This issue affects FLAP - Business WordPress Theme: from n/a through 1.5.
9.8 Critical severity
The Fashion - Model Agency One Page Beauty Theme: Deserialization of Untrusted Data
CVE-2025-31052Jun 9, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton The Fashion - Model Agency One Page Beauty Theme nrgfashion allows Object Injection.This issue affects The Fashion - Model Agency One Page Beauty Theme: from n/a through <= 1.4.4.
9.8 Critical severity
The Business: Deserialization of Untrusted Data
CVE-2025-31430May 23, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton The Business allows Object Injection. This issue affects The Business: from n/a through 1.6.1.
9.8 Critical severity
HotStar – Multi-Purpose Business Theme: Deserialization of Untrusted Data
CVE-2025-31069May 23, 2025Themeton
Deserialization of Untrusted Data vulnerability in themeton HotStar – Multi-Purpose Business Theme allows Object Injection. This issue affects HotStar – Multi-Purpose Business Theme: from n/a through 1.4.