iThemes

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

iThemes records in CISA KEV

No iThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Backupbuddy 6 records HIGH Security 2 records MEDIUM Authorize.net 1 record LOW Builder Style Manager 1 record LOW Builder Theme Depot 1 record LOW Builder Theme Market 1 record LOW Custom Url Tracking 1 record LOW Easy Canadian Sales Taxes 1 record LOW

Records

1 record in Custom Url Tracking · all components

TI-2015-07743 CVE-2015-9366 · GHSA-g7gc-7fp9-789g

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via…

LOW 29

Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0095 Published 2019-08-28 No fix listed CWE-79

Open these records in search →