colorlibplugins

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

colorlibplugins records in CISA KEV

No colorlibplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Activello 3 records CRITICAL Fancybox 3 records MEDIUM Bonkers 2 records CRITICAL Coming Soon & Maintenance Mode 2 records LOW Illdy 2 records CRITICAL Newspaper X 2 records CRITICAL Pixova Lite 2 records CRITICAL Shapely 2 records CRITICAL

Records

2 records in Newspaper X · all components

TI-2020-18879 CVE-2020-36708 · GHSA-48h4-c5mw-4h8j

Epsilon Framework Themes (Various Versions) - Function Injection

CRITICAL 85

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, P…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.65342 Published 2023-06-07 No fix listed CWE-94

TI-2020-18892 CVE-2020-36721 · GHSA-x6fw-c968-rf52

Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation

LOW 37

The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Activation/Deactivation.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00971 Published 2023-06-07 No fix listed CWE-284

Open these records in search →

Critical	1
High	0
Medium	11
Low	0
No CVSS	0