Headwaythemes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Headwaythemes records in CISA KEV

No Headwaythemes vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2016-08991 CVE-2016-10953 · GHSA-gq8c-39h5-8qvq

LOW 26

The Headway theme before 3.8.9 for WordPress has XSS via the license key field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00756 Published 2019-09-13 No fix listed CWE-79