Read the docs

CryoutCreations

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

CryoutCreations records in CISA KEV

No CryoutCreations vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Serious Slider 2 records MEDIUM Esotera 1 record LOW Fluida 1 record LOW Kahuna 1 record LOW Liquido 1 record LOW Mantra 1 record LOW Nirvana 1 record LOW Parabola 1 record LOW

Records

18 records

TI-2024-10292 CVE-2024-11108 · GHSA-3vx3-2qpf-jvhh

Serious Slider < 1.2.7 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Serious Slider WordPress plugin before 1.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0033 Published 2024-12-20 Fixed in 1.2.7 CWE-79
TI-2024-30495 CVE-2024-45452 · GHSA-jwmm-4mqq-m255

WordPress Septera theme <= 1.5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Septera septera allows Stored XSS.This issue affects Septera: from n/a through <= 1.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2024-09-17 No fix listed CWE-79
TI-2024-30494 CVE-2024-45451 · GHSA-c5mg-jpxr-m6mq

WordPress Roseta theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Roseta roseta allows Stored XSS.This issue affects Roseta: from n/a through <= 1.3.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2024-09-17 No fix listed CWE-79
TI-2024-29647 CVE-2024-44058 · GHSA-678c-c78x-9mgf

WordPress Parabola theme <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Parabola allows Stored XSS.This issue affects Parabola: from n/a through 2.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-09-15 No fix listed CWE-79
TI-2024-29646 CVE-2024-44057 · GHSA-cvq3-wg24-45v2

WordPress Nirvana theme <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Nirvana allows Stored XSS.This issue affects Nirvana: from n/a through 1.6.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-09-15 No fix listed CWE-79
TI-2024-29645 CVE-2024-44056 · GHSA-q2wf-44h2-28xg

WordPress Mantra theme <= 3.3.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Mantra allows Stored XSS.This issue affects Mantra: from n/a through 3.3.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-09-15 No fix listed CWE-79
TI-2024-29643 CVE-2024-44054 · GHSA-9wfx-jpxp-q2rh

WordPress Fluida theme <= 1.8.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Fluida allows Stored XSS.This issue affects Fluida: from n/a through 1.8.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-09-15 No fix listed CWE-79
TI-2024-29639 CVE-2024-44050 · GHSA-7mjf-q2vv-77gf

WordPress Verbosa theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cryout-creations Verbosa verbosa allows Stored XSS.This issue affects Verbosa: from n/a through <= 1.2.3.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-09-17 No fix listed CWE-79
TI-2024-29583 CVE-2024-43994 · GHSA-3qq8-68m6-hvm3

WordPress Kahuna theme <= 1.7.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Kahuna allows Stored XSS.This issue affects Kahuna: from n/a through 1.7.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2024-09-17 No fix listed CWE-79
TI-2024-29541 CVE-2024-43952 · GHSA-328c-8rw4-p536

WordPress Esotera theme <= 1.2.5.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Esotera allows Stored XSS.This issue affects Esotera: from n/a through 1.2.5.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-08-29 No fix listed CWE-79
TI-2024-29540 CVE-2024-43951 · GHSA-wh5v-48m2-2wp8

WordPress Tempera theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Tempera allows Stored XSS.This issue affects Tempera: from n/a through 1.8.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00295 Published 2024-08-29 No fix listed CWE-79
TI-2024-23631 CVE-2024-35762 · GHSA-grgx-v94g-52gr

WordPress Serious Slider plugin <= 1.2.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Cryout Creations Serious Slider allows Stored XSS.This issue affects Serious Slider: from n/a through 1.2.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2024-06-21 No fix listed CWE-79
TI-2026-13231 CVE-2026-15726 · GHSA-8x7q-3q4v-jcjq

Serious Slider <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Shortcode Attribute

Priority LOW 28

The Serious Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'theme' Shortcode Attribute in all versions up to, and including, 1.4.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00349 Published 2026-08-16 No fix listed CWE-79
TI-2024-29582 CVE-2024-43993 · GHSA-2w82-jh8v-fhg4

WordPress Liquido theme <= 1.0.1.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Liquido allows Stored XSS.This issue affects Liquido: from n/a through 1.0.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-09-17 No fix listed CWE-79
TI-2024-29003 CVE-2024-43351 · GHSA-3jp7-w958-xwmc

WordPress Bravada theme <= 1.1.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Bravada bravada allows Stored XSS.This issue affects Bravada: from n/a through 1.1.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00253 Published 2024-08-18 No fix listed CWE-79
TI-2024-24763 CVE-2024-37248 · GHSA-76xj-g72f-jr82

WordPress Anima theme <= 1.4.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in CryoutCreations Anima allows Stored XSS.This issue affects Anima: from n/a through 1.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-06-26 No fix listed CWE-79
TI-2026-20517 CVE-2026-25399 · GHSA-v7h8-7wpg-c8vx

WordPress Serious Slider plugin <= 1.2.7 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in CryoutCreations Serious Slider cryout-serious-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serious Slider: from n/a through <= 1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00279 Published 2026-02-19 No fix listed CWE-862
Open these records in search →