Vendors / NsThemes Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now NsThemes records in CISA KEV No NsThemes vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 35
An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0123 · Published 2022-04-11 · No fix listed CWE-80
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NsThemes NS Simple Intro Loader ns-simple-intro-loader allows Reflected XSS.This issue affects NS Simple Intro Loader:…
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.0037 · Published 2025-03-26 · No fix listed CWE-79
Priority LOW 27
The NS Product icon badge plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00211 · Published 2026-05-27 · No fix listed CWE-79
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-08-08 · No fix listed CWE-79
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00392 · Published 2023-03-20 · No fix listed CWE-79
Priority LOW 19
The NS IE Compatibility Fixer plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 2.1.5.
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00161 · Published 2026-01-07 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
Critical0 High2 Medium4 Low0 No CVSS0