Read the docs

Spoonthemes

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Spoonthemes records in CISA KEV

No Spoonthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Adifier 2 records MEDIUM Couponis 1 record MEDIUM

Records

5 records

TI-2024-12417 CVE-2024-13375 · GHSA-h5fp-7r6f-5x9m

Adifier System <= 3.1.7 - Unauthenticated Arbitrary Password Reset

Priority MEDIUM 52

The Adifier System plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.1.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01484 Published 2025-01-18 No fix listed CWE-620
TI-2023-27162 CVE-2023-49752 · GHSA-j3j2-p3cg-j257

WordPress Adifier System Plugin < 3.1.4 is vulnerable to SQL Injection

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.This issue affects Adifier - Classified Ads WordPress Theme: fro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00588 Published 2023-12-20 Fixed in 3.1.4 CWE-89
TI-2023-27160 CVE-2023-49750 · GHSA-qv9c-vfw7-f233

WordPress Couponis Demo Plugin < 2.2 is vulnerable to SQL Injection

Priority MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.This issue affects Couponis - Affiliate & Submit…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00758 Published 2023-12-19 Fixed in 2.2 CWE-89
TI-2023-27163 CVE-2023-49753 · GHSA-36gm-66fp-prv4

WordPress Adifier System plugin < 3.1.4 - Local File Inclusion vulnerability

Priority LOW 34

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spoonthemes Adifier System allows PHP Local File Inclusion.This issue affects Adifier System: from n/a before 3.1.4.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.006 Published 2024-05-17 Fixed in 3.1.4 CWE-22
TI-2023-26846 CVE-2023-49187 · GHSA-gj58-8prx-8h92

WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifier - Classified Ads WordPress Theme allows Reflected XSS.This issue affects Adifier - Classified Ads…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2023-12-15 Fixed in 3.1.4 CWE-79
Open these records in search →