{"schema_version":1,"title":"Themeum vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 28 vulnerabilities in Themeum: 1 in the last 7 days and 21 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-18439, was published on 22 September 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/themeum","json_url":"https://junglewise.ai/threats/vendors/themeum.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/themeum","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":6,"all_time":28,"critical":3,"exploited":0,"last_7_days":1,"last_30_days":7,"last_90_days":21,"last_365_days":28},"latest":[{"cve":"CVE-2026-18439","cvss":4.3,"epss":0.0025,"slug":"cve-2026-18439-the-tutor-lms-elearning-and-online-course-solution-plugin-for","title":"Tutor LMS insecure direct object reference in quiz builder","severity":"medium","exploited":false,"published_at":"2026-09-22T08:16:39.08+00:00","url":"https://junglewise.ai/threats/cve-2026-18439-the-tutor-lms-elearning-and-online-course-solution-plugin-for"},{"cve":"CVE-2026-89081","cvss":6.1,"epss":0.0038,"slug":"cve-2026-89081-the-tutor-lms-elearning-and-online-course-solution-plugin-for","title":"Tutor LMS reflected cross-site scripting in search parameter","severity":"medium","exploited":false,"published_at":"2026-09-19T03:17:16.303+00:00","url":"https://junglewise.ai/threats/cve-2026-89081-the-tutor-lms-elearning-and-online-course-solution-plugin-for"},{"cve":"CVE-2026-88944","cvss":4.3,"epss":0.0046,"slug":"cve-2026-88944-the-tutor-lms-elearning-and-online-course-solution-plugin-for","title":"Tutor LMS authorization bypass in post deletion","severity":"medium","exploited":false,"published_at":"2026-09-19T03:17:16+00:00","url":"https://junglewise.ai/threats/cve-2026-88944-the-tutor-lms-elearning-and-online-course-solution-plugin-for"},{"cve":"CVE-2026-92465","cvss":7.6,"epss":0.0038,"slug":"cve-2026-92465-themeum-wp-mega-menu-sql-injection","title":"Themeum WP Mega Menu SQL injection","severity":"high","exploited":false,"published_at":"2026-09-16T12:17:08.073+00:00","url":"https://junglewise.ai/threats/cve-2026-92465-themeum-wp-mega-menu-sql-injection"},{"cve":"CVE-2026-85569","cvss":7.2,"epss":0.0046,"slug":"cve-2026-85569-tutor-lms-privilege-escalation-via-rest-api-request","title":"Tutor LMS privilege escalation via REST API request misclassification","severity":"high","exploited":false,"published_at":"2026-09-16T06:16:34.217+00:00","url":"https://junglewise.ai/threats/cve-2026-85569-tutor-lms-privilege-escalation-via-rest-api-request"},{"cve":"CVE-2026-78175","cvss":8.8,"epss":0.0107,"slug":"cve-2026-78175-tutor-lms-php-object-injection-in-withdraw-method-handler","title":"Tutor LMS PHP Object Injection in withdraw method handler","severity":"high","exploited":false,"published_at":"2026-09-12T08:16:24.507+00:00","url":"https://junglewise.ai/threats/cve-2026-78175-tutor-lms-php-object-injection-in-withdraw-method-handler"},{"cve":"CVE-2026-19092","cvss":9.8,"epss":0.02,"slug":"cve-2026-19092-tutor-lms-plugin-arbitrary-function-invocation-in-template","title":"Tutor LMS plugin arbitrary function invocation in template rendering","severity":"critical","exploited":false,"published_at":"2026-08-27T20:17:04.15+00:00","url":"https://junglewise.ai/threats/cve-2026-19092-tutor-lms-plugin-arbitrary-function-invocation-in-template"},{"cve":"CVE-2026-14310","cvss":5.4,"slug":"cve-2026-14310-themeum-tutor-lms-idor-in-q-a-threads","title":"Themeum Tutor LMS IDOR in Q&A threads","severity":"info","exploited":false,"published_at":"2026-07-30T06:25:00.567+00:00","url":"https://junglewise.ai/threats/cve-2026-14310-themeum-tutor-lms-idor-in-q-a-threads"},{"cve":"CVE-2026-15444","cvss":4.9,"slug":"cve-2026-15444-themeum-tutor-lms-sql-injection-in-coupon-code","title":"Themeum Tutor LMS SQL injection in coupon_code","severity":"medium","exploited":false,"published_at":"2026-07-28T12:16:35.767+00:00","url":"https://junglewise.ai/threats/cve-2026-15444-themeum-tutor-lms-sql-injection-in-coupon-code"},{"cve":"CVE-2026-65436","cvss":6.8,"slug":"cve-2026-65436-themeum-kirki-arbitrary-file-deletion-in-editor-component","title":"Themeum Kirki arbitrary file deletion in Editor component","severity":"medium","exploited":false,"published_at":"2026-07-27T15:17:08.91+00:00","url":"https://junglewise.ai/threats/cve-2026-65436-themeum-kirki-arbitrary-file-deletion-in-editor-component"},{"cve":"CVE-2026-65531","cvss":4.8,"slug":"cve-2026-65531-themeum-qubely-broken-access-control","title":"Themeum Qubely broken access control","severity":"medium","exploited":false,"published_at":"2026-07-23T12:18:46.017+00:00","url":"https://junglewise.ai/threats/cve-2026-65531-themeum-qubely-broken-access-control"},{"cve":"CVE-2026-1372","cvss":4.3,"slug":"cve-2026-1372-themeum-tutor-lms-elementor-addons-missing-authorization-in-plugin","title":"Themeum Tutor LMS Elementor Addons missing authorization in plugin activation","severity":"medium","exploited":false,"published_at":"2026-07-21T09:16:53.813+00:00","url":"https://junglewise.ai/threats/cve-2026-1372-themeum-tutor-lms-elementor-addons-missing-authorization-in-plugin"},{"cve":"CVE-2026-15022","cvss":6.5,"slug":"cve-2026-15022-themeum-tutor-lms-sql-injection-in-stored-quiz-answer-array","title":"Themeum Tutor LMS SQL injection in Stored Quiz Answer Array","severity":"medium","exploited":false,"published_at":"2026-07-16T09:16:17.44+00:00","url":"https://junglewise.ai/threats/cve-2026-15022-themeum-tutor-lms-sql-injection-in-stored-quiz-answer-array"},{"cve":"CVE-2026-57727","cvss":7.5,"slug":"cve-2026-57727-themeum-kirki-missing-authorization-in-access-control","title":"Themeum Kirki missing authorization in access control","severity":"high","exploited":false,"published_at":"2026-07-13T10:16:39.427+00:00","url":"https://junglewise.ai/threats/cve-2026-57727-themeum-kirki-missing-authorization-in-access-control"},{"cve":"CVE-2026-57726","cvss":9.3,"slug":"cve-2026-57726-themeum-kirki-blind-sql-injection","title":"Themeum Kirki blind SQL injection","severity":"critical","exploited":false,"published_at":"2026-07-13T10:16:39.317+00:00","url":"https://junglewise.ai/threats/cve-2026-57726-themeum-kirki-blind-sql-injection"},{"cve":"CVE-2026-57694","cvss":6.5,"slug":"cve-2026-57694-themeum-tutor-lms-idor-authorization-bypass","title":"Themeum Tutor LMS IDOR authorization bypass","severity":"medium","exploited":false,"published_at":"2026-07-13T10:16:36.893+00:00","url":"https://junglewise.ai/threats/cve-2026-57694-themeum-tutor-lms-idor-authorization-bypass"},{"cve":"CVE-2026-12275","cvss":5.4,"slug":"cve-2026-12275-themeum-tutor-lms-auth-bypass-in-droip-and-kirki-integrations","title":"Themeum Tutor LMS auth bypass in Droip and Kirki integrations","severity":"info","exploited":false,"published_at":"2026-07-13T07:16:27.923+00:00","url":"https://junglewise.ai/threats/cve-2026-12275-themeum-tutor-lms-auth-bypass-in-droip-and-kirki-integrations"},{"cve":"CVE-2026-12274","cvss":8.8,"slug":"cve-2026-12274-tutor-lms-idor-in-content-builder-save-handler","title":"Tutor LMS IDOR in content-builder save handler","severity":"info","exploited":false,"published_at":"2026-07-13T07:16:27.83+00:00","url":"https://junglewise.ai/threats/cve-2026-12274-tutor-lms-idor-in-content-builder-save-handler"},{"cve":"CVE-2026-12273","cvss":4.3,"slug":"cve-2026-12273-themeum-tutor-lms-authorization-bypass-in-comment-handler","title":"Themeum Tutor LMS authorization bypass in comment handler","severity":"info","exploited":false,"published_at":"2026-07-13T07:16:27.733+00:00","url":"https://junglewise.ai/threats/cve-2026-12273-themeum-tutor-lms-authorization-bypass-in-comment-handler"},{"cve":"CVE-2026-12271","cvss":5.4,"slug":"cve-2026-12271-themeum-tutor-lms-idor-in-quiz-attempt-modification","title":"Themeum Tutor LMS IDOR in quiz attempt modification","severity":"info","exploited":false,"published_at":"2026-07-13T07:16:27.62+00:00","url":"https://junglewise.ai/threats/cve-2026-12271-themeum-tutor-lms-idor-in-quiz-attempt-modification"},{"cve":"CVE-2026-13443","cvss":6.4,"slug":"cve-2026-13443-themeum-tutor-lms-stored-xss-in-lesson-attachment-title","title":"Themeum Tutor LMS stored XSS in Lesson Attachment Title","severity":"medium","exploited":false,"published_at":"2026-07-01T05:16:18.513+00:00","url":"https://junglewise.ai/threats/cve-2026-13443-themeum-tutor-lms-stored-xss-in-lesson-attachment-title"},{"cve":"CVE-2026-10736","cvss":4.9,"epss":0.0036,"slug":"cve-2026-10736-themeum-tutor-lms-sql-injection-in-data-parameter","title":"Themeum Tutor LMS SQL injection in data parameter","severity":"medium","exploited":false,"published_at":"2026-06-18T06:16:56.573+00:00","url":"https://junglewise.ai/threats/cve-2026-10736-themeum-tutor-lms-sql-injection-in-data-parameter"},{"cve":"CVE-2026-22332","cvss":9.3,"slug":"cve-2026-22332-themeum-tutor-lms-pro-unauthenticated-sql-injection","title":"Themeum Tutor LMS Pro unauthenticated SQL injection","severity":"critical","exploited":false,"published_at":"2026-06-17T13:20:08.067+00:00","url":"https://junglewise.ai/threats/cve-2026-22332-themeum-tutor-lms-pro-unauthenticated-sql-injection"},{"cve":"CVE-2026-22330","cvss":8.1,"slug":"cve-2026-22330-themeum-right-way-local-file-inclusion","title":"Themeum Right Way local file inclusion","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:07.807+00:00","url":"https://junglewise.ai/threats/cve-2026-22330-themeum-right-way-local-file-inclusion"},{"cve":"CVE-2026-22329","cvss":7.1,"slug":"cve-2026-22329-themeum-skillate-unauthenticated-xss-in-wordpress-theme","title":"Themeum Skillate unauthenticated XSS in WordPress theme","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:06.903+00:00","url":"https://junglewise.ai/threats/cve-2026-22329-themeum-skillate-unauthenticated-xss-in-wordpress-theme"}],"vendor":{"hub":true,"name":"Themeum","slug":"themeum","homepage":"https://www.themeum.com/","description":"A software company that develops WordPress themes and plugins, including the Tutor LMS platform.","url":"https://junglewise.ai/threats/vendors/themeum"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":1,"exploited":0,"vulnerabilities":8},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":1,"exploited":0,"vulnerabilities":1},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":4},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2026-19092","cvss":9.8,"epss":0.02,"slug":"cve-2026-19092-tutor-lms-plugin-arbitrary-function-invocation-in-template","title":"Tutor LMS plugin arbitrary function invocation in template rendering","severity":"critical","exploited":false,"published_at":"2026-08-27T20:17:04.15+00:00","url":"https://junglewise.ai/threats/cve-2026-19092-tutor-lms-plugin-arbitrary-function-invocation-in-template"},{"cve":"CVE-2026-57726","cvss":9.3,"slug":"cve-2026-57726-themeum-kirki-blind-sql-injection","title":"Themeum Kirki blind SQL injection","severity":"critical","exploited":false,"published_at":"2026-07-13T10:16:39.317+00:00","url":"https://junglewise.ai/threats/cve-2026-57726-themeum-kirki-blind-sql-injection"},{"cve":"CVE-2026-22332","cvss":9.3,"slug":"cve-2026-22332-themeum-tutor-lms-pro-unauthenticated-sql-injection","title":"Themeum Tutor LMS Pro unauthenticated SQL injection","severity":"critical","exploited":false,"published_at":"2026-06-17T13:20:08.067+00:00","url":"https://junglewise.ai/threats/cve-2026-22332-themeum-tutor-lms-pro-unauthenticated-sql-injection"},{"cve":"CVE-2026-78175","cvss":8.8,"epss":0.0107,"slug":"cve-2026-78175-tutor-lms-php-object-injection-in-withdraw-method-handler","title":"Tutor LMS PHP Object Injection in withdraw method handler","severity":"high","exploited":false,"published_at":"2026-09-12T08:16:24.507+00:00","url":"https://junglewise.ai/threats/cve-2026-78175-tutor-lms-php-object-injection-in-withdraw-method-handler"},{"cve":"CVE-2026-22330","cvss":8.1,"slug":"cve-2026-22330-themeum-right-way-local-file-inclusion","title":"Themeum Right Way local file inclusion","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:07.807+00:00","url":"https://junglewise.ai/threats/cve-2026-22330-themeum-right-way-local-file-inclusion"},{"cve":"CVE-2026-92465","cvss":7.6,"epss":0.0038,"slug":"cve-2026-92465-themeum-wp-mega-menu-sql-injection","title":"Themeum WP Mega Menu SQL injection","severity":"high","exploited":false,"published_at":"2026-09-16T12:17:08.073+00:00","url":"https://junglewise.ai/threats/cve-2026-92465-themeum-wp-mega-menu-sql-injection"},{"cve":"CVE-2026-57727","cvss":7.5,"slug":"cve-2026-57727-themeum-kirki-missing-authorization-in-access-control","title":"Themeum Kirki missing authorization in access control","severity":"high","exploited":false,"published_at":"2026-07-13T10:16:39.427+00:00","url":"https://junglewise.ai/threats/cve-2026-57727-themeum-kirki-missing-authorization-in-access-control"},{"cve":"CVE-2026-85569","cvss":7.2,"epss":0.0046,"slug":"cve-2026-85569-tutor-lms-privilege-escalation-via-rest-api-request","title":"Tutor LMS privilege escalation via REST API request misclassification","severity":"high","exploited":false,"published_at":"2026-09-16T06:16:34.217+00:00","url":"https://junglewise.ai/threats/cve-2026-85569-tutor-lms-privilege-escalation-via-rest-api-request"},{"cve":"CVE-2026-22329","cvss":7.1,"slug":"cve-2026-22329-themeum-skillate-unauthenticated-xss-in-wordpress-theme","title":"Themeum Skillate unauthenticated XSS in WordPress theme","severity":"high","exploited":false,"published_at":"2026-06-17T13:20:06.903+00:00","url":"https://junglewise.ai/threats/cve-2026-22329-themeum-skillate-unauthenticated-xss-in-wordpress-theme"},{"cve":"CVE-2026-65436","cvss":6.8,"slug":"cve-2026-65436-themeum-kirki-arbitrary-file-deletion-in-editor-component","title":"Themeum Kirki arbitrary file deletion in Editor component","severity":"medium","exploited":false,"published_at":"2026-07-27T15:17:08.91+00:00","url":"https://junglewise.ai/threats/cve-2026-65436-themeum-kirki-arbitrary-file-deletion-in-editor-component"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"Themeum Tutor LMS","slug":"tutor-lms","vulnerabilities":20,"url":"https://junglewise.ai/threats/technologies/tutor-lms"},{"name":"Themeum Kirki","slug":"kirki","vulnerabilities":15,"url":"https://junglewise.ai/threats/technologies/kirki"}]}