Advisories · Technology

THEMECO Cornerstone.

Every CVE that names THEMECO Cornerstone among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54185 CVE record

CVSS 8.5 High

WordPress Cornerstone plugin < 7.8.8 - SQL Injection vulnerability
- THEMECO Cornerstone
- SQL injection
Not analysed yet 17 Jun 2026
CVE-2026-49113 CVE record

CVSS 8.5 High

WordPress Cornerstone plugin < 7.8.8 - Arbitrary Code Execution vulnerability
- THEMECO Cornerstone
- Code injection
Not analysed yet 16 Jun 2026
CVE-2025-63072 CVE record

CVSS 6.5 Medium

WordPress Cornerstone plugin <= 7.7.3 - Cross Site Scripting (XSS) vulnerability
- THEMECO Cornerstone
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025