Read the docs

seothemes

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

seothemes records in CISA KEV

No seothemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Display Terms Shortcode 1 record LOW Seo Slider 1 record LOW

Records

5 records

TI-2024-34803 CVE-2024-51899 · GHSA-rmvp-hjvh-xmv3

WordPress Simple Pricing Table plugin <= 1.0.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes Simple Pricing Table simple-pricing-table allows Stored XSS.This issue affects Simple Pricing Table: from n/…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00296 Published 2024-11-19 No fix listed CWE-79
TI-2024-01854 CVE-2024-1993 · GHSA-h7vf-2gmx-cr9w

Icon Widget <= 1.3.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Priority LOW 29

The Icon Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on us…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0042 Published 2024-05-02 No fix listed CWE-79
TI-2023-05250 CVE-2023-5707 · GHSA-rw75-prg2-58jc

SEO Slider <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The SEO Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'slider' shortcode and post meta in all versions up to, and including, 1.1.0 due to insufficient input sanitization and ou…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00614 Published 2023-11-03 No fix listed CWE-79
TI-2025-38420 CVE-2025-62097 · GHSA-7gg3-4c5v-79p3

WordPress SEO Slider plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes SEO Slider seo-slider allows DOM-Based XSS.This issue affects SEO Slider: from n/a through <= 1.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00159 Published 2025-12-31 No fix listed CWE-79
TI-2024-34524 CVE-2024-51610 · GHSA-h5pp-286r-62gf

WordPress Display Terms Shortcode plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in seothemes Display Terms Shortcode display-terms-shortcode allows Stored XSS.This issue affects Display Terms Shortcode…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-11-09 No fix listed CWE-79
Open these records in search →