Theme Blvd Widget Areas Vulnerabilities

The Theme Blvd Widget Areas plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can...

CVSS:

6.1

Affected:

up to 1.3.0

Fix:

No patched version reported

Disclosed:

Aug 26, 2025

CVE-2025-53289 on NVD →

The following plugins and themes for WordPress are vulnerable to arbitrary option deletion and user data manipulation: Theme Blvd Shortcodes plugin <= 1.5.2 , Theme Blvd Widget Areas plugin < = 1.2.2, Theme Blvd Layout Builder plugin <= 2.0.1, Theme Blvd Sliders plugin <= 1.2.3, WP Jump Start theme <= 1.2.4, Alyeska th...

CVSS:

6.5

Affected:

up to 1.2.2

Fixed in:

1.2.3

Disclosed:

Nov 8, 2014