TI-2022-03444 CVE-2022-3750 · GHSA-vw43-4r8p-cvx6
Ask Me < 6.8.7 - Post Deletion via CSRF
Priority MEDIUM 55
The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.
inkthemes
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
inkthemes records in CISA KEVNo inkthemes vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
TI-2023-10757 CVE-2023-25447 · GHSA-pf96-3xrg-4qv6
WordPress ColorWay Theme <= 4.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.
TI-2025-33199 CVE-2025-53232 · GHSA-hhcx-x49f-jr9v
WordPress WP Gmail SMTP plugin <= 1.0.7 - Sensitive Data Exposure vulnerability
Priority LOW 32
Insertion of Sensitive Information Into Sent Data vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Retrieve Embedded Sensitive Data.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7.
TI-2025-30653 CVE-2025-48327 · GHSA-4hf2-vc5g-v7qr
WordPress WP Mailgun SMTP plugin <= 1.0.7 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in inkthemes WP Mailgun SMTP wp-mailgun-smtp allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Mailgun SMTP: from n/a through <= 1.0.7.
TI-2016-08999 CVE-2016-10961 · GHSA-5pxf-jjhj-84x7
The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
Priority LOW 29
The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
TI-2022-01137 CVE-2022-1251 · GHSA-c83j-mhmm-58g7
Ask Me < 6.8.4 - CSRF in Edit Profile
Priority LOW 20
The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted…
TI-2025-38445 CVE-2025-62123 · GHSA-8m72-c8m2-2r7m
WordPress WP Gmail SMTP plugin <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in inkthemes WP Gmail SMTP wp-gmail-smtp allows Cross Site Request Forgery.This issue affects WP Gmail SMTP: from n/a through <= 1.0.7.