MetricThemes

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

MetricThemes records in CISA KEV

No MetricThemes vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-18770 CVE-2025-25101 · GHSA-g444-6qg9-2xm3

WordPress Munk Sites plugin <= 1.0.7 - CSRF to Arbitrary Plugin Installation vulnerability

MEDIUM 44

Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites munk-sites allows Cross Site Request Forgery.This issue affects Munk Sites: from n/a through <= 1.0.7.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00551 Published 2025-02-07 No fix listed CWE-352

TI-2024-34543 CVE-2024-51629 · GHSA-4247-fw2x-jv5v

WordPress Header Footer Composer for Elementor plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MetricThemes Header Footer Composer for Elementor header-footer-composer allows DOM-Based XSS.This issue affects Heade…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00268 Published 2024-11-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0