Read the docs

Porto Theme

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Porto Theme records in CISA KEV

No Porto Theme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Functionality 1 record MEDIUM

Records

1 record in Functionality · all components

TI-2023-26568 CVE-2023-48738 · GHSA-3vvp-hjc4-47w5

WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL Injection

Priority MEDIUM 49

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto Theme - Functionality.This issue affects Porto Theme - Functionality: from n/a before 2.12.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00774 Published 2023-12-19 Fixed in 2.12.1 CWE-89
Open these records in search →