Read the docs

bulktheme

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

bulktheme records in CISA KEV

No bulktheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wooexim 1 record MEDIUM

Records

1 record in Wooexim · all components

TI-2025-01102 CVE-2025-1288 · GHSA-244m-98g9-4pg8

wooexim <= 5.0.0 - CSRF to Reflected XSS

Priority MEDIUM 60

The WOOEXIM WordPress plugin through 5.0.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make an unauthenticated user vulnerable to reflected XSS…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00172 Published 2025-05-15 No fix listed CWE-352
Open these records in search →