themehunk Big Store vulnerabilities

Latest themehunk Big Store CVEs

Newest publication first

1. CVE-2025-30881 WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability

   Published 2025-03-27

   Medium·CVSS 5.4 EPSS 0.36%

   Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through <= 2.0.8.

2. CVE-2023-27431 WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2023-11-12

   High·CVSS 8.8 EPSS 0.31%

   Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.