LiquidThemes Hub - Responsive Multi-Purpose WordPress Theme vulnerabilities

Latest LiquidThemes Hub - Responsive Multi-Purpose WordPress Theme CVEs

Newest publication first

1. CVE-2025-0951 LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated

   Published 2025-08-28

   Medium·CVSS 4.3 EPSS 0.20%

   Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.