Themeist

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Themeist records in CISA KEV

No Themeist vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

I Recommend This 4 records MEDIUM

Records

4 records in I Recommend This · all components

TI-2014-08238 CVE-2014-10376 · GHSA-293j-x829-fj24

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

MEDIUM 46

The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01779 Published 2019-08-16 No fix listed CWE-89

TI-2014-08399 CVE-2014-125099 · GHSA-f6j6-4qcx-fq7v

I Recommend This Plugin dot-irecommendthis.php sql injection

MEDIUM 43

A vulnerability has been found in I Recommend This Plugin up to 3.7.2 on WordPress and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00723 Published 2023-04-20 No fix listed CWE-89

TI-2023-13213 CVE-2023-28696 · GHSA-54v8-3w5h-ggf6

WordPress I Recommend This Plugin <= 3.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend This: from n/a through 3.9.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-11-12 No fix listed CWE-352

TI-2023-09487 CVE-2023-23673 · GHSA-fgxr-fc5q-2355

WordPress I Recommend This Plugin <= 3.8.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Harish Chouhan, Themeist I Recommend This plugin <= 3.8.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-05-16 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	1
Low	0
No CVSS	0