← WordPress Vulnerabilities
WordPress security by component

Themebox - Digital Products Ecommerce

Themebox - Digital Products Ecommerce is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published May 27, 2026; the highest CVE/CNA score is 7.1.

Theme slug: themebox

CVE-2025-52747: Themebox - Digital Products Ecommerce: Cross-site scripting

Themebox - Digital Products Ecommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.4.2.

PublishedMay 27, 2026
Known safe version> 1.4.2
Safe version
May 27, 2026 CVE-2025-52747
Themebox - Digital Products Ecommerce: Cross-site scripting
Themebox - Digital Products Ecommerce is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is n/a through 1.4.2.
> 1.4.2
CVE7.1
NVDPending