TI-2023-13542 CVE-2023-29100 · GHSA-5jmf-f6xx-vpcq
WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dream-Theme The7 plugin <= 11.6.0 versions.
Dream-Theme
Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Dream-Theme records in CISA KEVNo Dream-Theme vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in The7 · all components
TI-2023-15426 CVE-2023-32123 · GHSA-fq9c-68mg-56qj
WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)
Priority LOW 27
Cross-Site Request Forgery (CSRF) vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3.