CMSSuperHeroes

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

CMSSuperHeroes records in CISA KEV

No CMSSuperHeroes vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-31175 CVE-2025-49060 · GHSA-q927-c92h-36g4

WordPress Wastia theme < 1.1.3 - Arbitrary File Upload vulnerability

MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Wastia wastia allows Upload a Web Shell to a Web Server.This issue affects Wastia: from n/a through < 1.1.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00456 Published 2025-10-22 No fix listed CWE-434

TI-2025-12443 CVE-2025-13619 · GHSA-p5j5-69wq-jfpm

Flex Store Users <= 1.1.0 - Unauthenticated Privilege Escalation

MEDIUM 49

The Flex Store Users plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00369 Published 2025-12-20 No fix listed CWE-269

TI-2025-30476 CVE-2025-48106 · GHSA-4h9r-f57p-988h

WordPress Clanora theme < 1.3.1 - Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in CMSSuperHeroes Clanora clanora allows Using Malicious Files.This issue affects Clanora: from n/a through < 1.3.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0062 Published 2025-10-22 No fix listed CWE-434

Open these records in search →

Critical	3
High	0
Medium	0
Low	0
No CVSS	0