Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

TeconceTheme — Vulnerabilities & Security Advisories 15

Browse all 15 CVE security advisories affecting TeconceTheme. AI-powered Chinese analysis, POCs, and references for each vulnerability.

TeconceTheme is a WordPress theme provider offering templates for business and portfolio websites. Historically, the themes have been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities, accounting for 12 CVEs to date. These weaknesses often stem from insufficient input validation and improper permission checks. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for unpatched installations. Users are advised to maintain updated versions and implement additional security measures to mitigate potential exploitation risks.

CVE ID Title CVSS Severity Published
CVE-2026-73388 WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability — Nikstore Core CWE-89 9.3 Critical 2026-08-19
CVE-2026-32333 WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability — Mayosis Core CWE-79 7.1 High 2026-08-18
CVE-2026-39655 WordPress Mayosis Core plugin <= 5.4.7 - Broken Access Control vulnerability — Mayosis Core CWE-862 5.3 Medium 2026-05-26
CVE-2025-69366 WordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability — Emerce Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69365 WordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability — Uroan Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69310 WordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability — Woodly Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69309 WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability — Saasplate Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69308 WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability — Nestbyte Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69306 WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability — Electio Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69307 WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability — Medinik Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69305 WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability — Crete Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-69304 WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability — Allmart CWE-89 9.3 Critical 2026-02-20
CVE-2025-69295 WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability — Coven Core CWE-89 9.3 Critical 2026-02-20
CVE-2025-49418 WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability — Allmart CWE-918 7.2 High 2025-07-04
CVE-2025-1565 Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read — Mayosis Core CWE-22 7.5 High 2025-04-25

This page lists every published CVE security advisory associated with TeconceTheme. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.