Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

The7 — Website and eCommerce Builder for WordPress — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in The7 — Website and eCommerce Builder for WordPress, with AI-generated Chinese analysis, references, and POCs.

Vendor: Dream-Theme

CVE IDTitleCVSSSeverityPublished
CVE-2026-6646 The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter CWE-79 6.4 Medium2026-05-15
CVE-2025-11897 The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css' CWE-79 6.4 Medium2025-10-25
CVE-2025-7726 The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes CWE-79 6.4 Medium2025-08-09
CVE-2024-5451 The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute CWE-79 6.4 Medium2024-06-25

All 4 known CVE vulnerabilities affecting The7 — Website and eCommerce Builder for WordPress with full Chinese analysis, references, and POCs where available.