Vendors / Cththemes Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 5
Exploited now Cththemes records in CISA KEV No Cththemes vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 39
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0317 · Published 2020-01-13 · No fix listed CWE-639
Priority LOW 33
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.03243 · Published 2020-01-13 · No fix listed CWE-79
Priority LOW 32
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02582 · Published 2020-01-13 · No fix listed CWE-79
Priority LOW 32
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, J…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02582 · Published 2020-01-13 · No fix listed CWE-79
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00406 · Published 2023-07-25 · No fix listed CWE-79
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-06-26 · No fix listed CWE-79
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-04-07 · No fix listed CWE-79
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00408 · Published 2023-04-07 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 5 3 0 0
THREATIST.IORead the docs