AivahThemes

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

AivahThemes records in CISA KEV

No AivahThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Business Hours Pro 1 record MEDIUM

Records

1 record in Business Hours Pro · all components

TI-2021-06532 CVE-2021-24240 · GHSA-mwhf-wq2w-263x

Business Hours Pro <= 5.5.0 - Unauthenticated Arbitrary File Upload to RCE

MEDIUM 48

The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03037 Published 2021-04-22 No fix listed CWE-434

Open these records in search →

Critical	2
High	7
Medium	0
Low	0
No CVSS	0