kingthemes — Vulnerabilities & Security Advisories 3

Kingthemes develops WordPress themes and website templates for businesses and individuals. Historically, their products have been vulnerable to multiple security issues, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities. These flaws often stem from insufficient input validation and improper access controls in theme files. The company has three CVEs on record, with vulnerabilities affecting multiple theme versions. Security researchers have identified consistent patterns of insecure coding practices, particularly in file handling and data processing functions. While no major public security incidents have been widely reported, the recurring nature of these vulnerabilities suggests ongoing challenges in secure development practices.