sparklewpthemes — Vulnerabilities & Security Advisories 12

Sparklewpthemes develops WordPress themes and website templates, primarily serving small businesses and personal websites. Historically, their products have been vulnerable to multiple security issues, including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The company has accumulated 12 CVEs to date, with many stemming from insufficient input validation and improper access controls. Notable incidents include multiple RCE vulnerabilities in their theme options panel and persistent XSS flaws in theme customizer components. Security researchers have consistently identified similar patterns across their theme portfolio, suggesting systemic security gaps in their development practices.