themearile vulnerabilities

Products

• Consultstreet 1
• NewsExo 1

Latest themearile CVEs

Newest publication first

1. CVE-2026-39618 WordPress NewsExo theme <= 7.1 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-04-08

   Medium·CVSS 4.3 EPSS 0.11%

   Cross-Site Request Forgery (CSRF) vulnerability in themearile NewsExo newsexo allows Cross Site Request Forgery.This issue affects NewsExo: from n/a through <= 7.1.

2. CVE-2025-58813 WordPress Consultstreet Theme <= 3.0.0 - Broken Access Control Vulnerability

   Published 2025-09-05

   Medium·CVSS 4.3 EPSS 0.24%

   Missing Authorization vulnerability in themearile Consultstreet consultstreet allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Consultstreet: from n/a through <= 3.0.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.