Priority MEDIUM 47
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00476 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Unauthenticated SQL Injection in Nikstore Core <= 1.5 versions.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.004 · Published 2026-08-19 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a thro…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <=…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <=…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3…
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00432 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 46
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.
CVSS 3.1CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00451 · Published 2026-02-20 · No fix listed CWE-89
Priority MEDIUM 40
The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00562 · Published 2025-04-25 · No fix listed CWE-22
Priority LOW 37
Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-07-04 · No fix listed CWE-918
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.
CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00251 · Published 2026-08-18 · No fix listed CWE-79
Priority LOW 30
Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00231 · Published 2026-05-26 · No fix listed CWE-862