Read the docs

postmagthemes

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

postmagthemes records in CISA KEV

No postmagthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Postmagthemes Demo Import 1 record HIGH

Records

3 records

TI-2022-01412 CVE-2022-1540 · GHSA-wpw9-595f-g34r

PostmagThemes Demo <= 1.0.7 - Admin+ Arbitrary File Upload

Priority HIGH 67

The PostmagThemes Demo Import WordPress plugin through 1.0.7 does not validate the imported file, allowing high-privilege users such as admin to upload arbitrary files (such as PHP) leading to RCE.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01116 Published 2022-12-05 No fix listed
TI-2025-11071 CVE-2025-12074 · GHSA-43j7-cmcw-j9hr

Context Blog <= 1.2.5 - Unauthenticated Private Post Disclosure

Priority LOW 30

The Context Blog theme for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.5 via the 'context_blog_modal_popup' due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00378 Published 2026-02-18 No fix listed CWE-200
Open these records in search →