Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Cththemes

First CVE: Jan 13, 2020Active for: 7 yearsTotal CVEs: 8

Cththemes develops a focused line of WordPress theme and plugin products for booking and directory applications, including CityBook, EasyBook, TownHub, Balkon, and Monolit, that serve small-business and hospitality use cases. The vendor's vulnerabilities center on web-application input-handling issues, particularly cross-site scripting and authorization-bypass flaws arising from user-controlled parameters, which are characteristic of plugins that accept and render user input; the product line's public-facing nature and the availability of exploit tooling warrant active monitoring. Live severity, exploitation, and coverage details are shown alongside this summary.

FAUCET AI Generated
8
Total CVEs
More Total CVEs than 90% of tracked vendors
0.6
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 9% of tracked vendors
6.3
Avg CVSS Score
Higher Avg CVSS Score than 37% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Cththemes over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jan 13, 2020
6 years ago
Most Recent CVE
Jul 25, 2023
1,098 days ago

Products(7 total)

Top CVEs

Signals from CVEs in this vendor scope (8 CVEs).

8 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2019-20210MEDIUM
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
Jan 13, 20206.130NOYES
CVE-2019-20209HIGH
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php t
Jan 13, 20207.524NONO
CVE-2019-20212MEDIUM
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
Jan 13, 20206.122NONO
CVE-2023-29236MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions.
Apr 7, 20236.121NONO
CVE-2019-20211MEDIUM
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longit
Jan 13, 20206.121NONO
CVE-2023-25041MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.
Apr 7, 20236.120NONO
CVE-2023-36502MEDIUM
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.
Jul 25, 20236.118NONO
CVE-2023-29430MEDIUM
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.
Jun 26, 20236.118NONO
View all 8 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products8 CVEs
88%
13%
Severity distribution among all CVEs352,727 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network8 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low8 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None1 (12.5%)
Unknown0 (0.0%)
Required7 (87.5%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None8 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (8 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
12.5% of CVEs· 97th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Cththemes.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Cththemes — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Cththemes's Products

View all 2 CNAs →

Top CWEs