Read the docs

theme funda

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

theme funda records in CISA KEV

No theme funda vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-18359 CVE-2025-24642 · GHSA-82ch-63xf-6pr3

WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in theme funda Setup Default Featured Image setup-default-feature-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Setup Default Feature…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00413 Published 2025-02-03 No fix listed CWE-862
TI-2025-16198 CVE-2025-22294 · GHSA-6vm3-2q2x-wf88

WordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Cu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00445 Published 2025-01-07 No fix listed CWE-79
TI-2025-40639 CVE-2025-66114 · GHSA-rf55-6qxf-873f

WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2025-11-21 No fix listed CWE-862
TI-2025-16690 CVE-2025-22809 · GHSA-wrc6-jvcr-2g5p

WordPress PDF Catalog Woocommerce plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda PDF Catalog Woocommerce pdf-catalog-woocommerce allows DOM-Based XSS.This issue affects PDF Catalog Woocom…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-09 No fix listed CWE-79
TI-2025-22126 CVE-2025-30856 · GHSA-gh9x-wq33-hmvv

WordPress Custom Field For WP Job Manager plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Cross Site Request Forgery.This issue affects Custom Field For WP Job Manager: from n/…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00207 Published 2025-03-27 No fix listed CWE-352
Open these records in search →