themehunk

Records47All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high11CVSS 7.0–8.9

Exploited now

themehunk records in CISA KEV

No themehunk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contact Form & Lead Form Elementor Builder 5 records MEDIUM Wp Popup Builder 4 records HIGH Big Store 2 records LOW Hunk Companion 2 records HIGH Mega Menu 2 records LOW Advance Product Search 1 record MEDIUM Gutenberg Blocks 1 record LOW Th Advance Product Search 1 record MEDIUM

Records

2 records in Big Store · all components

TI-2023-12163 CVE-2023-27431 · GHSA-qx76-f9jc-mr3w

WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-11-12 No fix listed CWE-352

TI-2025-22151 CVE-2025-30881 · GHSA-2wcw-5cjw-6vvc

WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through <= 2.0.8.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00362 Published 2025-03-27 No fix listed CWE-862

Open these records in search →

Critical	9
High	11
Medium	27
Low	0
No CVSS	0