Read the docs

NasaTheme

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

NasaTheme records in CISA KEV

No NasaTheme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nasa Core 1 record MEDIUM

Records

7 records

TI-2025-31186 CVE-2025-49071 · GHSA-f4mc-8m8c-7xfc

WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00524 Published 2025-06-17 No fix listed CWE-434
TI-2025-26249 CVE-2025-39507 · GHSA-wfj8-m9jg-h945

WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Priority MEDIUM 42

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00844 Published 2025-05-16 No fix listed CWE-98
TI-2025-26248 CVE-2025-39506 · GHSA-2gf3-v8px-49h6

WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-31185 CVE-2025-49070 · GHSA-wm95-f4rw-29qq

WordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File Inclusion.This issue affects Elessi: from n/a t…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00691 Published 2025-07-04 No fix listed CWE-98
TI-2025-31788 CVE-2025-49873 · GHSA-9c2g-rcwg-w2m6

WordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi elessi-theme allows Reflected XSS.This issue affects Elessi: from n/a through <= 6.3.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-06-20 No fix listed CWE-79
TI-2025-26250 CVE-2025-39508 · GHSA-6vq8-33g8-28r2

WordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Reflected XSS.This issue affects Nasa Core: from n/a through <= 6.4.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-06-17 No fix listed CWE-79
TI-2025-31182 CVE-2025-49067 · GHSA-72mm-xf58-p22c

WordPress Nasa Core plugin < 6.4.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Stored XSS.This issue affects Nasa Core: from n/a through < 6.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00218 Published 2025-06-06 No fix listed CWE-79
Open these records in search →