Known Vulnerabilities for The7 by Dream-Theme
Listed below are 2 of the newest known vulnerabilities associated with "The7" by "Dream-Theme".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-63074 json | Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Drea... | Not Provided | 2025-12-09 | 2026-04-01 |
| CVE-2025-63073 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dream-Theme The7 dt-the... | Not Provided | 2025-12-09 | 2026-04-01 |
| CVE-2024-5451 json | The The7 — Website and eCommerce Builder for WordPress theme for WordPress is vulnerable to Stored Cross-Site Scripting via... | Not Provided | 2024-06-25 | 2026-04-08 |
| CVE-2023-32123 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 6.1 - MEDIUM | 2023-11-13 | 2023-12-06 |
| CVE-2023-29100 json | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions. | 6.1 - MEDIUM | 2023-06-23 | 2023-06-28 |