Read the docs

A WP Life

Records43All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high20CVSS 7.0–8.9

Exploited now

A WP Life records in CISA KEV

No A WP Life vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Monster 6 records HIGH Album Gallery 2 records LOW Blog Filter 2 records LOW Formula 2 records LOW Slider Responsive Slideshow 2 records MEDIUM Weather Effect 2 records LOW Coming Soon Maintenance Mode 1 record LOW Contact Form Widget 1 record MEDIUM

Records

2 records in Formula · all components

TI-2024-05235 CVE-2024-5638 · GHSA-4x3m-rqxv-975r

Formula <= 0.5.1 - Reflected Cross-Site Scripting via ti_customizer_notify_dismiss_recommended_plugins

Priority LOW 27

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_customizer_notify_dismiss_recommended_plugins' AJAX action in all versions up to, and including, 0.5.1 due…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-06-08 No fix listed CWE-79
TI-2024-05212 CVE-2024-5613 · GHSA-6225-mwq7-3vjc

Formula <= 0.5.1 - Reflected Cross-Site Scripting via quality_customizer_notify_dismiss_action

Priority LOW 27

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'quality_customizer_notify_dismiss_action' AJAX action in all versions up to, and including, 0.5.1 due to insu…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00386 Published 2024-06-08 No fix listed CWE-79
Open these records in search →