Read the docs

brandexponents

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

brandexponents records in CISA KEV

No brandexponents vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tatsu 1 record HIGH

Records

6 records

TI-2021-07372 CVE-2021-25094 · GHSA-grmv-gp4f-w59q

Tatsu < 3.3.12 - Unauthenticated RCE

Priority HIGH 76

The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.83232 Published 2022-04-25 Fixed in 3.3.12 CWE-306
TI-2025-13119 CVE-2025-14359 · GHSA-gj9x-rhcw-wvp4

WordPress Oshine theme < 7.3.0 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in brandexponents Oshine allows PHP Local File Inclusion.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00484 Published 2026-01-08 Fixed in 7.3.0 CWE-98
TI-2024-29633 CVE-2024-44044 · GHSA-gffg-jrfc-c36v

WordPress Oshine Modules plugin < 3.3.8 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brandexponents Oshine Modules oshine-modules allows Reflected XSS.This issue affects Oshine Modules: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00255 Published 2025-02-16 No fix listed CWE-79
TI-2025-36328 CVE-2025-58660 · GHSA-222x-37vj-4h5f

WordPress Oshine Core Plugin <= 1.5.5 - Broken Access Control Vulnerability

Priority LOW 24

Missing Authorization vulnerability in brandexponents Oshine Core oshine-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oshine Core: from n/a through <= 1.5.5.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00273 Published 2025-09-22 No fix listed CWE-862
Open these records in search →