Read the docs

peregrinethemes

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

peregrinethemes records in CISA KEV

No peregrinethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bloglo 1 record LOW

Records

4 records

TI-2026-20451 CVE-2026-25333 · GHSA-xmxf-f859-45ch

WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopwell: from n/a through <= 1.0.11.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00264 Published 2026-02-19 No fix listed CWE-862
TI-2025-19650 CVE-2025-26734 · GHSA-c2rm-4wxp-4832

WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through <= 1.1.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-03-27 No fix listed CWE-79
TI-2024-23584 CVE-2024-35715 · GHSA-qjcw-jwrw-8fhf

WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-08 No fix listed CWE-79
Open these records in search →