Login Request a demo
BE
Product
Betheme
by muffingroup · last CVE Oct 9, 2026
25
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities25In the news0Timeline
Severity mix
Critical 1High 9Medium 15Low 0
Severity
All severities25Critical1High9Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Betheme to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-6261
8.8
1%
May 5
Betheme <= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload
Affected: through 28.4
CVE-2024-2694
8.8
1%
Aug 30
Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection
Affected: through 27.5.6
CVE-2022-45356
8.8
1%
Mar 25
WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability
Affected: through 26.6.1
CVE-2022-3861
8.8
2%
Nov 21
Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection
Affected: through 26.5.1.4
CVE-2022-45077
8.8
1%
Nov 17
WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability
Affected: before 26.6
CVE-2022-45353
8.1
1%
Jan 14
WordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control
Affected: through 26.6.1
CVE-2023-47770
7.6
0%
Jun 19
WordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability
Affected: before 27.1.2
CVE-2023-39998
7.2
0%
Jun 19
WordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability
Affected: through 27.1.1
CVE-2026-94415
7.1
0%
Oct 9
WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability
Affected: through 28.5.8
Showing 9