Vendors / ThemeinProgress Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now ThemeinProgress records in CISA KEV No ThemeinProgress vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <= 1.2.9 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-05-28 · No fix listed CWE-352
Priority LOW 38
Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.This issue affects WIP Custom Login: from n/a through 1.2.7.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00439 · Published 2024-01-17 · No fix listed CWE-862
Priority LOW 33
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02873 · Published 2020-08-12 · No fix listed CWE-79
Priority LOW 29
All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01011 · Published 2023-09-04 · Fixed in 1.1.13, 1.8.6 +19
Open these records in search → All records by CVSS severity
0 2 2 0 0
THREATIST.IORead the docs