Read the docs

Developers Italia

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Developers Italia records in CISA KEV

No Developers Italia vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-59913 CVE-2026-87792 · GHSA-28h8-rc7c-m27v

Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme

Priority MEDIUM 44

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00462 Published 2026-09-15 No fix listed CWE-200
TI-2026-59914 CVE-2026-87793 · GHSA-m59h-9rxw-9jx5

Reflected XSS in WordPress theme design-scuole-wordpress-theme

Priority LOW 24

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-79
TI-2026-60455 CVE-2026-89307 · GHSA-wfjc-xr6c-c6vw

HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme

Priority LOW 23

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-c…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00364 Published 2026-09-15 No fix listed CWE-601
Open these records in search →