Known Vulnerabilities for products from Muffingroup
Listed below are 10 of the newest known vulnerabilities associated with the vendor "Muffingroup".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-63075 json | Not Provided | 2025-12-09 | 2026-04-01 | |
| CVE-2023-29101 json | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Muffingroup Betheme theme <= 26.7.5 versions. | 6.1 - MEDIUM | 2023-05-10 | 2023-05-16 |
| CVE-2022-45363 json | Auth. (subscriber+) Stored Cross-Site Scripting (XSS) in Muffingroup Betheme theme <= 26.6.1 on WordPress. | 5.4 - MEDIUM | 2022-11-22 | 2023-11-07 |
| CVE-2022-45356 json | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. | Not Provided | 2024-03-25 | 2026-04-28 |
| CVE-2022-45353 json | Broken Access Control in Betheme theme <= 26.6.1 on WordPress. | Not Provided | 2023-01-14 | 2026-04-28 |
| CVE-2022-45352 json | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. | Not Provided | 2024-03-25 | 2026-04-28 |
| CVE-2022-45351 json | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. | Not Provided | 2024-03-25 | 2026-04-28 |
| CVE-2022-45349 json | Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1. | Not Provided | 2024-03-25 | 2026-04-28 |
| CVE-2022-45077 json | Auth. (subscriber+) PHP Object Injection vulnerability in Betheme theme <= 26.5.1.4 on WordPress. | 8.8 - HIGH | 2022-11-17 | 2022-11-18 |
| CVE-2022-3861 json | The Betheme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 26.5.1.4 via deserial... | Not Provided | 2022-11-21 | 2026-04-08 |
| CVE-2022-3747 json | The Becustom plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.5.2. This... | Not Provided | 2022-11-29 | 2026-04-08 |