Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Theme-Spirit records in CISA KEVNo Theme-Spirit vulnerabilities are listed in CISA KEV.
Priority MEDIUM 43
The Spirit Framework plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.2.14.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00556 · Published 2025-10-03 · No fix listed CWE-288
Priority LOW 34
The Spirit Framework plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.2.13.
CVSS 3.1HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.00706 · Published 2025-09-12 · No fix listed CWE-98
