hashthemes

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

hashthemes records in CISA KEV

No hashthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Hash Elements 4 records LOW Hash Form 4 records HIGH Hashthemes Demo Importer 1 record LOW Total 1 record LOW

Records

1 record in Total · all components

TI-2024-01648 CVE-2024-1771 · GHSA-4967-792x-v69h

Total <= 2.1.59 - Missing Authorization to Authenticated (Subscriber+) Sections Update

LOW 26

The Total theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the total_order_sections() function in all versions up to, and including, 2.1.59.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00406 Published 2024-03-06 No fix listed CWE-862

Open these records in search →

Critical	5
High	2
Medium	25
Low	0
No CVSS	0