Read the docs

ThemeGrill

Records44All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

ThemeGrill records in CISA KEV

No ThemeGrill vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Masteriyo 3 records MEDIUM Maintenance Page 2 records LOW Themegrill Demo Importer 2 records MEDIUM Colormag 1 record LOW Esteem 1 record LOW Himalayas 1 record LOW Magazine Blocks 1 record LOW

Records

2 records in Maintenance Page · all components

TI-2024-01365 CVE-2024-1462 · GHSA-mpvh-q2vr-ww2x

Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API

Priority LOW 31

The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-03-13 No fix listed CWE-284
TI-2024-01278 CVE-2024-1370 · GHSA-q6fr-vjrc-hw6v

Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure

Priority LOW 24

The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribe_download function hooked via AJAX action in all versions up to, and including, 1.0…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00445 Published 2024-03-13 No fix listed CWE-284
Open these records in search →