Read the docs

cmsmasters

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

cmsmasters records in CISA KEV

No cmsmasters vulnerabilities are listed in CISA KEV.

Records

7 records

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00435 Published 2026-02-19 No fix listed CWE-98
Priority LOW 35

The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmasters_hide…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00328 Published 2025-03-14 No fix listed CWE-862
Priority LOW 31

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Comp…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00245 Published 2026-02-19 No fix listed CWE-862
Priority LOW 28

The CMSMasters Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.14.7 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-12-03 No fix listed CWE-79
Priority LOW 28

The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, and including, 1.8.8 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2024-10-09 No fix listed CWE-79
Priority LOW 20

The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-18 No fix listed CWE-862
Open these records in search →