theasys

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

theasys records in CISA KEV

No theasys vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2025-18813 CVE-2025-25144 · GHSA-vm5c-8wmm-qf2p

WordPress Theasys plugin <= 1.0.1 - CSRF to Stored XSS vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys theasys allows Stored XSS.This issue affects Theasys: from n/a through <= 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00291 Published 2025-02-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0