Read the docs

detheme

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

detheme records in CISA KEV

No detheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dethemekit For Elementor 11 records LOW

Records

11 records in Dethemekit For Elementor · all components

TI-2024-04076 CVE-2024-4374 · GHSA-5mrp-5g6h-8p37

DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Priority LOW 30

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2.1.3 due to insufficient input sanitization and output escapi…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00354 Published 2024-05-18 No fix listed CWE-79
TI-2024-21395 CVE-2024-32508 · GHSA-wcxr-jpx9-m67f

WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a through 2.0.2…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00317 Published 2024-04-17 No fix listed CWE-79
TI-2025-19688 CVE-2025-26772 · GHSA-ggq2-5m97-f833

WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elemento…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00244 Published 2025-02-17 No fix listed CWE-79
TI-2025-01313 CVE-2025-1526 · GHSA-qvj7-78v7-x5v2

DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The DethemeKit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the De Product Display Widget (countdown feature) in all versions up to, and including, 2.1.9 due to insufficient input s…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2025-03-14 No fix listed CWE-79
TI-2024-31911 CVE-2024-47632 · GHSA-3jv8-pgwm-w6qh

WordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Detheme DethemeKit For Elementor dethemekit-for-elementor allows Stored XSS.This issue affects DethemeKit For Elemento…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-10-05 No fix listed CWE-79
TI-2024-22877 CVE-2024-34575 · GHSA-23x7-8p2h-rhcr

WordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in deTheme DethemeKit For Elementor allows Stored XSS.This issue affects DethemeKit For Elementor: from n/a throug…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-05-17 No fix listed CWE-79
TI-2024-12683 CVE-2024-13644 · GHSA-m7m8-474q-jcc8

DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget

Priority LOW 28

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's De Gallery widget in all versions up to, and including, 2.1.8 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00246 Published 2025-02-13 No fix listed CWE-79
TI-2024-05034 CVE-2024-5418 · GHSA-jwqj-hg2j-7q5j

DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute

Priority LOW 28

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'slitems' attribute within the plugin's De Product Tab & Slide widget in all versions up to, and including, 2.1.4 due…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00321 Published 2024-05-31 No fix listed CWE-79
TI-2021-06562 CVE-2021-24270 · GHSA-f37x-2cx7-rh6g

DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS

Priority LOW 25

The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0059 Published 2021-05-05 Fixed in 1.5.5.5 CWE-79
TI-2024-05830 CVE-2024-6283 · GHSA-9qx2-5845-97g2

Cross-site scripting in DethemeKit for Elementor

Priority LOW 24

The DethemeKit For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the URL parameter of the De Gallery widget in all versions up to and including 2.1.5 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00314 Published 2024-06-27 No fix listed CWE-79
TI-2025-00555 CVE-2025-0661 · GHSA-wx3f-pjjp-293h

DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure

Priority LOW 20

The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the duplicate_post() function due to insufficient restrictions on which posts can be…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00285 Published 2025-02-13 No fix listed CWE-639
Open these records in search →