Read the docs

Out the Box

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Out the Box records in CISA KEV

No Out the Box vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-23001 CVE-2025-31864 · GHSA-rw6m-2rv9-w377

WordPress Beam me up Scotty – Back to Top Button plugin <= 1.0.23 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Out the Box Beam me up Scotty beam-me-up-scotty allows Stored XSS.This issue affects Beam me up Scotty: from n/a throu…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00343 Published 2025-04-01 No fix listed CWE-79
TI-2024-20758 CVE-2024-31386 · GHSA-cjgc-85v4-mwgc

Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

Priority LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Theme…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00368 Published 2024-04-10 No fix listed CWE-352
Open these records in search →