ThemeGrill

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

ThemeGrill records in CISA KEV

No ThemeGrill vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Themegrill Demo Importer · all components

TI-2020-18616 CVE-2020-36333 · GHSA-3q59-p3w9-wv54

MEDIUM 46

themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.03995 Published 2021-05-05 No fix listed CWE-306

TI-2020-18617 CVE-2020-36334 · GHSA-2q73-4mgq-w666

LOW 39

themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00646 Published 2021-05-05 No fix listed CWE-352