iThemes

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

iThemes records in CISA KEV

No iThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Backupbuddy 6 records HIGH Security 2 records MEDIUM Authorize.net 1 record LOW Builder Style Manager 1 record LOW Builder Theme Depot 1 record LOW Builder Theme Market 1 record LOW Custom Url Tracking 1 record LOW Easy Canadian Sales Taxes 1 record LOW

Records

2 records in Security · all components

TI-2018-09073 CVE-2018-12636 · GHSA-7wrw-mvgr-jqmr

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL…

MEDIUM 55

The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.28844 Published 2018-06-22 No fix listed CWE-89

TI-2018-05358 CVE-2018-7433 · GHSA-mhjj-g9cv-766w

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

LOW 36

The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01377 Published 2018-03-02 No fix listed CWE-532

Open these records in search →

Critical	1
High	8
Medium	18
Low	0
No CVSS	0