ThemeCatcher

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ThemeCatcher records in CISA KEV

No ThemeCatcher vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-40451 CVE-2026-56058 · GHSA-86wc-v2qw-vmwq

WordPress Quform plugin <= 2.23.0 - Arbitrary File Upload vulnerability

MEDIUM 43

Subscriber Arbitrary File Upload in Quform <= 2.23.0 versions.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00479 Published 2026-06-26 No fix listed CWE-434

TI-2024-08122 CVE-2024-8756 · GHSA-g7pq-m585-vmf6

Quform - WordPress Form Builder <= 2.20.0 - Unauthenticated Sensitive Information Exposure

LOW 30

The Quform - WordPress Form Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.20.0 via the 'saveUploadedFile' function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00384 Published 2024-11-09 No fix listed CWE-200

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0