The commercial theme vendors probably have a mailing list. I hope they'd contact their clients straight away.

This is turning out to be a rather big hole.