Read the docs

themeglow

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

themeglow records in CISA KEV

No themeglow vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2024-28896 CVE-2024-43243 · GHSA-3g64-6hgp-5m64

WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

Priority HIGH 82

Unrestricted Upload of File with Dangerous Type vulnerability in themeglow JobBoard Job listing job-board-light allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through <= 1.2.6…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0054 Published 2025-01-07 No fix listed CWE-434
TI-2025-04587 CVE-2025-5117 · GHSA-9x9p-9538-ffc5

Missing authorization in themeglow Property – Real Estate Directory Listing

Priority MEDIUM 40

The Property plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the use of the property_package_user_role metadata in versions 1.0.5 to 1.0.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00461 Published 2025-05-27 No fix listed CWE-862
TI-2025-22971 CVE-2025-31834 · GHSA-m34p-f62r-g5gv

WordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job listing: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00484 Published 2025-04-01 No fix listed CWE-862
TI-2025-18280 CVE-2025-24563 · GHSA-8x4h-hw3h-4f96

WordPress Cleanup – Directory Listing & Classifieds plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeglow Cleanup – Directory Listing & Classifieds WordPress Plugin cleanup-light allows Reflected XSS.This issue aff…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-31 No fix listed CWE-79
TI-2025-42314 CVE-2025-68855 · GHSA-wg3c-3523-f9fc

WordPress JobBoard Job listing plugin <= 1.2.8 - Sensitive Data Exposure vulnerability

Priority LOW 26

Insertion of Sensitive Information Into Sent Data vulnerability in themeglow JobBoard Job listing job-board-light allows Retrieve Embedded Sensitive Data.This issue affects JobBoard Job listing: from n/a through <= 1.2.8…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00359 Published 2026-02-20 No fix listed CWE-201
TI-2025-22970 CVE-2025-31833 · GHSA-xqh5-95vp-q7f3

WordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Insecure Direct Object References (IDOR) vulnerability

Priority LOW 23

Authorization Bypass Through User-Controlled Key vulnerability in themeglow JobBoard Job listing job-board-light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JobBoard Job lis…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00569 Published 2025-04-01 No fix listed CWE-639
Open these records in search →