Read the docs

ithemelandco

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

ithemelandco records in CISA KEV

No ithemelandco vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Report 1 record LOW

Records

5 records

TI-2024-25918 CVE-2024-38683 · GHSA-x4pw-5xx4-2jvj

WordPress WooCommerce Report plugin <= 1.4.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in iThemelandCo WooCommerce Report allows Reflected XSS.This issue affects WooCommerce Report: from n/a through 1.…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00395 Published 2024-07-20 No fix listed CWE-79
TI-2026-83268 CVE-2026-52710 · GHSA-56mc-w4mj-q72x

Cross-site scripting in GIFTiT Free Gifts for WooCommerce

Priority LOW 24

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in ithemelandco GIFTiT &#8211; Free Gifts for WooCommerce ithemeland-free-gifts-for-woo allows Code Injection.This issue affects…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.003 Published 2026-10-30 No fix listed CWE-80
TI-2024-03906 CVE-2024-4199 · GHSA-gw4x-f295-2jpv

Bulk Posts Editing For WordPress <= 4.2.3 - Authenticated (Subscriber+) Missing Authorization

Priority LOW 20

The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 4.2.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00296 Published 2024-05-15 No fix listed CWE-862
Open these records in search →