ThemeGrill

Records44All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

ThemeGrill records in CISA KEV

No ThemeGrill vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Masteriyo 3 records MEDIUM Maintenance Page 2 records LOW Themegrill Demo Importer 2 records MEDIUM Colormag 1 record LOW Esteem 1 record LOW Himalayas 1 record LOW Magazine Blocks 1 record LOW

Records

3 records in Masteriyo · all components

TI-2024-16396 CVE-2024-24882 · GHSA-prmv-r26v-qgx9

WordPress LMS by Masteriyo plugin <= 1.7.2 - Privilege Escalation vulnerability

MEDIUM 53

Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02094 Published 2024-05-17 No fix listed CWE-266

TI-2023-03130 CVE-2023-3345 · GHSA-2xrx-pwqh-wmrm

LMS by Masteriyo < 1.6.8 - Information Exposure

LOW 33

The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other students

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0197 Published 2023-07-31 Fixed in 1.6.8

TI-2024-22409 CVE-2024-33939 · GHSA-vfx3-xjmh-f34c

WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability

LOW 32

Authentication Bypass Using an Alternate Path or Channel vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00937 Published 2025-05-19 No fix listed CWE-288

Open these records in search →

Critical	5
High	9
Medium	30
Low	0
No CVSS	0