Cross-site Scripting Vulnerability in DesignThemes Portfolio Addon by DesignThemes

CVE-2025-68977

What is CVE-2025-68977?

A vulnerability exists in the DesignThemes Portfolio Addon that allows for DOM-Based Cross-site Scripting (XSS) attacks due to improper neutralization of input during web page generation. This can lead to unauthorized script execution in the user's browser, potentially compromising sensitive information and reducing user trust. Affected versions include all prior to and including version 1.5. It is crucial for users of the addon to implement security measures to mitigate the risk associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References