CVE-2026-94160: Themestek Extras For Labtechco Theme

High severity, CVSS 7.1.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeStek ThemeStek Extras for LabtechCO Theme themestek-labtechco-extras allows Reflected XSS.This issue affects ThemeStek Extras for LabtechCO Theme: from n/a through 8.4.

Affected products

• Themestek Themestek Extras For Labtechco Theme: up to and including 8.4

Published 2026-10-10. Last modified 2026-10-10.