themeisle

Records136All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high32CVSS 7.0–8.9

Exploited now

themeisle records in CISA KEV

No themeisle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Orbit Fox 15 records LOW Multiple Page Generator 10 records MEDIUM Otter Blocks 10 records LOW Rss Aggregator By Feedzy 9 records MEDIUM Visualizer 7 records HIGH Product Addons & Fields For Woocommerce 4 records MEDIUM Cloud Templates & Patterns Collection 1 record LOW Google Maps Plugin By Intergeo 1 record LOW

Records

7 records in Visualizer · all components

TI-2019-12631 CVE-2019-16932 · GHSA-f8jx-jhwh-gq9j

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via…

HIGH 70

A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.38994 Published 2019-09-30 No fix listed CWE-918

TI-2022-02258 CVE-2022-2444 · GHSA-4rjr-p7j3-f64g

Visualizer: Tables and Charts Manager for WordPress <= 3.7.9 - Authenticated (Contributor+) PHAR Deserialization

MEDIUM 44

The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to deserialization of untrusted input via the 'remote_data' parameter in versions up to, and including 3.7.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02268 Published 2022-07-18 No fix listed CWE-502

TI-2024-23605 CVE-2024-35736 · GHSA-7g6j-6rv7-wp8q

WordPress Visualizer plugin <= 3.11.1 - SQL Injection vulnerability

LOW 38

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Themeisle Visualizer.This issue affects Visualizer: from n/a through 3.11.1.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00441 Published 2024-06-08 No fix listed CWE-89

TI-2019-12630 CVE-2019-16931 · GHSA-89c3-rfvp-jjmq

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an…

LOW 33

A stored XSS vulnerability in the Visualizer plugin 3.3.0 for WordPress allows an unauthenticated attacker to execute arbitrary JavaScript when an admin or other privileged user edits the chart via the admin dashboard.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03342 Published 2019-10-03 No fix listed CWE-79

TI-2024-18561 CVE-2024-27958 · GHSA-h8xw-5hw5-pq2g

WordPress Visualizer plugin <= 3.10.5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeisle Visualizer allows Reflected XSS.This issue affects Visualizer: from n/a through 3.10.5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00445 Published 2024-03-17 No fix listed CWE-79

TI-2023-09522 CVE-2023-23708 · GHSA-24mg-2698-cm2q

WordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.4 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00421 Published 2023-05-03 No fix listed CWE-79

TI-2022-23192 CVE-2022-46848 · GHSA-4xv8-9qm2-v7q2

WordPress Visualizer Plugin <= 3.9.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Themeisle Visualizer: Tables and Charts Manager for WordPress plugin <= 3.9.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00508 Published 2023-03-28 No fix listed CWE-79

Open these records in search →