MyThemeShop

Records18All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

MyThemeShop records in CISA KEV

No MyThemeShop vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Url Shortener 3 records LOW Launcher 2 records LOW My Wp Translate 2 records LOW Wp Shortcode 1 record LOW Wp Subscribe 1 record LOW

Records

3 records in Url Shortener · all components

TI-2023-09695 CVE-2023-23896 · GHSA-4mmp-hx5j-xw4g

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control

LOW 39

Missing Authorization vulnerability in MyThemeShop URL Shortener by MyThemeShop.This issue affects URL Shortener by MyThemeShop: from n/a through 1.0.17.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00521 Published 2024-01-17 No fix listed CWE-862

TI-2023-14308 CVE-2023-30472 · GHSA-cg6v-wpwr-8v26

WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MyThemeShop URL Shortener by MyThemeShop plugin <= 1.0.17 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00379 Published 2023-09-27 No fix listed CWE-79

TI-2024-05379 CVE-2024-5802 · GHSA-83m5-8929-p3h9

URL Shortener by MyThemeShop <= 1.0.17 - Admin+ Stored XSS

LOW 27

The URL Shortener by Myhop WordPress plugin through 1.0.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfilte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00403 Published 2024-07-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	6
Medium	12
Low	0
No CVSS	0