inkthemes

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

inkthemes records in CISA KEV

No inkthemes vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Colorway · all components

TI-2023-10757 CVE-2023-25447 · GHSA-pf96-3xrg-4qv6

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00273 Published 2023-05-22 No fix listed CWE-352

TI-2016-08999 CVE-2016-10961 · GHSA-5pxf-jjhj-84x7

LOW 29

The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0102 Published 2019-09-16 No fix listed CWE-79