Product by Muffingroup

    Muffingroup Betheme

    25 known vulnerabilities in Muffingroup Betheme (Muffingroup), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Muffingroup Betheme (Muffingroup)
    HighCVE-2022-3861

    Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection

    		8.8
    CriticalCVE-2026-65548

    WordPress Betheme theme <= 28.4.2 - Remote Code Execution (RCE) vulnerability

    		9.9
    HighCVE-2026-6261

    MuffinGroup Betheme: Unrestricted Upload of File with Dangerous Type

    		8.8
    HighCVE-2024-2694

    Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection

    		8.8
    HighCVE-2026-94415

    WordPress Betheme theme <= 28.5.8 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2026-6178

    MuffinGroup Betheme: Cross-site Scripting

    		6.4
    HighCVE-2023-39998

    WordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability

    		8.2
    MediumCVE-2026-6262

    Betheme <= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via 'mfn-icon-upload'

    		6.5
    HighCVE-2022-45077

    Muffingroup Betheme (WordPress theme): security vulnerability

    		6.3
    MediumCVE-2024-5647

    BlossomThemes Social Feed: Cross-site Scripting

    also in 11 other products

    		6.4
    HighCVE-2022-45356

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    		5.4
    HighCVE-2023-47770

    WordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability

    		7.6
    HighCVE-2023-29101

    WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2025-63075

    WordPress Betheme theme <= 28.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2022-45351

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2025-3077

    Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2025-9371

    Betheme <= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title'

    		6.4
    MediumCVE-2024-5567

    MuffinGroup Betheme: Cross-site Scripting

    		6.4
    MediumCVE-2025-7399

    Betheme <= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    		6.4
    MediumCVE-2025-0450

    Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    		6.4
    MediumCVE-2022-45352

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    		5.4
    MediumCVE-2024-3998

    MuffinGroup Betheme: Cross-site Scripting

    		6.4
    MediumCVE-2022-45363

    Muffingroup Betheme: Cross-site Scripting

    		5.4
    HighCVE-2022-45353

    WordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control

    		4.3
    MediumCVE-2022-45349

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    		4.3

    All products by Muffingroup