Advisories · Technology

wpweaver Weaver Xtreme Theme Support.

Every CVE that names wpweaver Weaver Xtreme Theme Support among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54870 CVE record

CVSS 6.5 Medium

WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability
- wpweaver Weaver Xtreme Theme Support
- Cross-site scripting (XSS)
Not analysed yet 13 Oct 2026
CVE-2024-4939 CVE record

CVSS 6.4 Medium

Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode
- wpweaver Weaver Xtreme Theme Support
- Cross-site scripting (XSS)
Not analysed yet 5 Jun 2024