AitThemes

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AitThemes records in CISA KEV

No AitThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Citadela Listing 1 record LOW Csv Import / Export 1 record HIGH

Records

3 records

TI-2020-18984 CVE-2020-36849 · GHSA-p27j-qf57-7cm7

AIT CSV import/export <= 3.0.3 - Unauthenticated Arbitrary File Upload

HIGH 82

The AIT CSV import/export plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the /wp-content/plugins/ait-csv-import-export/admin/upload-handler.php file in versions up to,…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07992 Published 2025-07-12 No fix listed CWE-434

TI-2024-21163 CVE-2024-32086 · GHSA-hgxh-g8gm-w483

WordPress Citadela Listing plugin <= 5.18.1 - Unauth. Sensitive Data Exposure vulnerability

LOW 39

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a through 5.18.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00519 Published 2024-04-16 No fix listed CWE-200

TI-2024-21162 CVE-2024-32085 · GHSA-xwvw-jh49-gmh9

WordPress Citadela Listing plugin < 5.20.0 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in AitThemes Citadela Listing.This issue affects Citadela Listing: from n/a before 5.20.0.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00209 Published 2024-04-15 Fixed in 5.20.0 CWE-352

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0