spicethemes

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

spicethemes records in CISA KEV

No spicethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Newsblogger 2 records MEDIUM Newscrunch 2 records MEDIUM Carousel, Recent Post Slider And Banner Slider 1 record LOW Spice Starter Sites 1 record LOW

Records

1 record in Spice Starter Sites · all components

TI-2024-29592 CVE-2024-44003 · GHSA-v397-5r22-jgxx

WordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-09-17 No fix listed CWE-79

Open these records in search →

Critical	1
High	8
Medium	3
Low	0
No CVSS	0