Advisories · Technology

designthemes LMS.

Every CVE that names designthemes LMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-78532 CVE record

CVSS 7.1 High

WordPress LMS theme <= 8.3 - Cross Site Scripting (XSS) vulnerability
- designthemes LMS
- Cross-site scripting (XSS)
Not analysed yet 10 Oct 2026
CVE-2026-27404 CVE record

CVSS 7.1 High

WordPress LMS theme <= 9.7 - Reflected Cross Site Scripting (XSS) vulnerability
- Designthemes LMS
- Cross-site scripting (XSS)
Not analysed yet 2 Jul 2026
CVE-2025-13542 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

DesignThemes LMS <= 1.0.4 - Unauthenticated Privilege Escalation
- DesignThemes LMS
- Privilege escalation
Not analysed yet 2 Dec 2025
CVE-2025-52833 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress LMS theme <= 9.2 - SQL Injection Vulnerability
- designthemes LMS
- SQL injection
Not analysed yet 4 Jul 2025
CVE-2025-52799 CVE record

CVSS 7.1 High

WordPress LMS theme <= 9.2 - Reflected Cross Site Scripting (XSS) Vulnerability
- designthemes LMS
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025