Theme4Press

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Theme4Press records in CISA KEV

No Theme4Press vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Demo Awesome 1 record LOW Evolve 1 record LOW

Records

3 records

TI-2024-24721 CVE-2024-37206 · GHSA-mhr6-phpg-wmf5

WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00272 Published 2024-07-22 No fix listed CWE-79

TI-2011-03405 CVE-2011-3852 · GHSA-x4v8-2mmv-m757

Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress…

LOW 26

Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03429 Published 2011-09-28 No fix listed CWE-79

TI-2024-24722 CVE-2024-37207 · GHSA-q2v2-hj53-gvr2

WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Awesome: from n/a through 1.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0