Vendors / themefunction Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now themefunction records in CISA KEV No themefunction vulnerabilities are listed in CISA KEV.
Priority LOW 39
Missing Authorization vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordP…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00399 · Published 2025-08-14 · No fix listed CWE-862
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefunction newseqo allows Stored XSS.This issue affects newseqo: from n/a through 2.1.1.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00368 · Published 2025-03-26 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themefunction WordPress Event Manager, Event Calendar and Booking Plugin eventin-pro allows Stored XSS.This issue affe…
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00235 · Published 2025-08-14 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium2 Low0 No CVSS0