<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: muffingroup-betheme</title><description>Every new CVE for muffingroup-betheme.</description><link>https://agentprime.io/</link><item><title>CVE-2026-94415: WordPress Betheme theme &lt;= 28.5.8 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-94415/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-94415/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 09 Oct 2026 10:00:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6178: Betheme &lt;= 28.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;icon_box_2&apos; Shortcode</title><link>https://agentprime.io/advisories/CVE-2026-6178/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6178/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 26 Aug 2026 07:42:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65548: WordPress Betheme theme &lt;= 28.4.2 - Remote Code Execution (RCE) vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-65548/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65548/</guid><description>CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Aug 2026 14:27:34 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-6261: Betheme &lt;= 28.4 - Authenticated (Author+) Arbitrary File Upload to Remote Code Execution via Icon Pack Upload</title><link>https://agentprime.io/advisories/CVE-2026-6261/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6261/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 11:25:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-6262: Betheme &lt;= 28.4 - Authenticated (Contributor+) Arbitrary File Deletion via &apos;mfn-icon-upload&apos;</title><link>https://agentprime.io/advisories/CVE-2026-6262/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-6262/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 11:24:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-63075: WordPress Betheme theme &lt;= 28.2 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-63075/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-63075/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Dec 2025 14:52:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9371: Betheme &lt;= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;page_title&apos;</title><link>https://agentprime.io/advisories/CVE-2025-9371/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9371/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 09 Oct 2025 11:20:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-7399: Betheme &lt;= 28.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-7399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-7399/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Aug 2025 03:41:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5647: Multiple Plugins &lt;= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library</title><link>https://agentprime.io/advisories/CVE-2024-5647/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5647/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Jul 2025 09:22:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3077: Betheme &lt;= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2025-3077/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3077/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Apr 2025 07:31:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-0450: Betheme &lt;= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS</title><link>https://agentprime.io/advisories/CVE-2025-0450/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-0450/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jan 2025 11:09:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5567: Betheme | Responsive Multipurpose WordPress &amp; WooCommerce Theme &lt;= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File</title><link>https://agentprime.io/advisories/CVE-2024-5567/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5567/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Sep 2024 06:47:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-2694: Betheme &lt;= 27.5.6 - Authenticated (Contributor+) PHP Object Injection</title><link>https://agentprime.io/advisories/CVE-2024-2694/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-2694/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Aug 2024 04:29:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3998: Betheme | Responsive Multipurpose WordPress &amp; WooCommerce Theme &lt;= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode</title><link>https://agentprime.io/advisories/CVE-2024-3998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3998/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Aug 2024 04:29:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-39998: WordPress BeTheme theme &lt;= 27.1.1 - Author+ Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-39998/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-39998/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Jun 2024 12:05:48 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45356: WordPress Betheme premium theme &lt;= 26.6.1 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-45356/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45356/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2024 11:23:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45352: WordPress Betheme premium theme &lt;= 26.6.1 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-45352/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45352/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2024 11:21:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45351: WordPress Betheme premium theme &lt;= 26.6.1 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-45351/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45351/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2024 11:19:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45349: WordPress Betheme premium theme &lt;= 26.6.1 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-45349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45349/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 25 Mar 2024 11:18:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-29101: WordPress Betheme Theme &lt;= 26.7.5 is vulnerable to Cross Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2023-29101/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-29101/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 10 May 2023 08:06:10 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45353: WordPress Betheme theme &lt;= 26.6.1 is vulnerable to Broken Access Control</title><link>https://agentprime.io/advisories/CVE-2022-45353/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45353/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 14 Jan 2023 10:53:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45363: WordPress Betheme premium theme &lt;= 26.6.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2022-45363/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45363/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Nov 2022 07:45:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-3861: Betheme &lt;= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection</title><link>https://agentprime.io/advisories/CVE-2022-3861/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-3861/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 21 Nov 2022 12:45:46 GMT</pubDate><category>CVE</category></item></channel></rss>