An-Themes vulnerabilities

Products

• Pin WP 2

Latest An-Themes CVEs

Newest publication first

1. CVE-2026-62082 WordPress Pin WP theme <= 7.0 - Reflected Cross Site Scripting (XSS) vulnerability

   Published 2026-10-10

   High·CVSS 7.1 EPSS 0.18%

   Unauthenticated Cross Site Scripting (XSS) in Pin WP <= 7.0 versions.

2. CVE-2025-53251 WordPress Pin WP theme < 7.2 - Arbitrary File Upload Vulnerability

   Published 2025-08-21

   Critical·CVSS 9.9 EPSS 0.37%

   Unrestricted Upload of File with Dangerous Type vulnerability in An-Themes Pin WP pin-wp allows Upload a Web Shell to a Web Server.This issue affects Pin WP: from n/a through < 7.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.