Select-Themes

Records39All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

Select-Themes records in CISA KEV

No Select-Themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Stockholm 2 records MEDIUM Stockholm Core 2 records MEDIUM

Records

2 records in Stockholm Core · all components

TI-2024-22856 CVE-2024-34554 · GHSA-v66w-6xcw-823f

WordPress Stockholm Core plugin <= 2.4.1 - Local File Inclusion vulnerability

MEDIUM 41

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm Core allows PHP Local File Inclusion.This issue affects Stockholm Core: from n/a through 2.4.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00514 Published 2024-06-04 No fix listed CWE-22

TI-2024-22855 CVE-2024-34553 · GHSA-36fq-6c6v-89gr

WordPress Stockholm Core plugin <= 2.4.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Select-Themes Stockholm Core allows Reflected XSS.This issue affects Stockholm Core: from n/a through 2.4.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-05-08 No fix listed CWE-79

Open these records in search →

Critical	4
High	29
Medium	6
Low	0
No CVSS	0