VEDA - MultiPurpose WordPress Theme

VEDA - MultiPurpose WordPress Theme has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 8.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Deserialization Of Untrusted Data, behind 2 of the records (100%).

None of the 2 issues recorded for VEDA - MultiPurpose WordPress Theme have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

8.7/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all VEDA - MultiPurpose WordPress Theme vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2024-13787

VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection

Read the full analysis

Vulnerability Records

2 records


2025-06-24 00:00	VEDA <= 4.2 - Authenticated (Subscriber+) PHP Object Injection VEDA - MultiPurpose WordPress Theme <= 4.2	`CVE-2025-60212`	7.5 High	Bonds	No
2025-03-04 00:00	VEDA - MultiPurpose WordPress Theme <= 4.2 - Authenticated (Subscriber+) PHP Object Injection VEDA - MultiPurpose WordPress Theme <= 4.2	`CVE-2024-13787`	9.8 Critical	Lucio Sá	No

Showing 1–2 of 2 reports