Read the docs

inkthemes

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

inkthemes records in CISA KEV

No inkthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ask Me 2 records MEDIUM Colorway 2 records LOW

Records

2 records in Ask Me · all components

TI-2022-03444 CVE-2022-3750 · GHSA-vw43-4r8p-cvx6

Ask Me < 6.8.7 - Post Deletion via CSRF

Priority MEDIUM 55

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for confirmation.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00389 Published 2022-11-21 Fixed in 6.8.7 CWE-352
TI-2022-01137 CVE-2022-1251 · GHSA-c83j-mhmm-58g7

Ask Me < 6.8.4 - CSRF in Edit Profile

Priority LOW 20

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00408 Published 2022-08-22 Fixed in 6.8.4 CWE-352
Open these records in search →