Vendors / BBS e-Theme Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now BBS e-Theme records in CISA KEV No BBS e-Theme vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 77
BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the uid parameter.
CVSS 4.0 HIGH 8.8· Network · No auth · No interaction · EPSS 0.0027 · Published 2026-06-15 · No fix listed CWE-89
Priority MEDIUM 43
Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00482 · Published 2024-06-13 · No fix listed CWE-862
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in BBS e-Theme BBS e-Popup plugin <= 2.4.5 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00374 · Published 2023-08-30 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 0 0 0
