OrigoThemes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

OrigoThemes records in CISA KEV

No OrigoThemes vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-17275 CVE-2025-23508 · GHSA-hfq9-6mjr-rj3f

WordPress Extra Options – Favicons plugin <= 1.1.0 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in OrigoThemes Extra Options – Favicons extra-options-favicons allows Stored XSS.This issue affects Extra Options – Favicons: from n/a through <= 1.1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0