TI-2024-01846 CVE-2024-1984 · GHSA-r7xx-h3jw-fq3j
Graphene <= 2.9.2 - Missing Authorization
Priority LOW 31
The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2.
No silverks vulnerabilities are listed in CISA KEV.
3 records
The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2.
The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and including, 2.9.4 due to insufficient input san…
Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.