Read the docs

themekraft

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

themekraft records in CISA KEV

No themekraft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Buddyforms 11 records HIGH Buddypress Woocommerce My Account Integration 3 records MEDIUM Post Form 3 records MEDIUM Buddypress Woocommerce My Account Integration. Create Woocommerce Member Pages 1 record LOW Post Form Registration Form Profile Form For User Profiles And Content Forms 1 record LOW Tk Google Fonts Gdpr Compliant 1 record MEDIUM

Records

3 records in Post Form · all components

TI-2024-01084 CVE-2024-1169 · GHSA-r22q-78j6-33wj

Missing authorization in themekraft Post Form – Registration Form – Profile Form for User…

Priority MEDIUM 40

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media upload due to a missing capability check on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0058 Published 2024-03-07 No fix listed CWE-862
TI-2024-01085 CVE-2024-1170 · GHSA-hfj2-23xp-72cr

Missing authorization in themekraft Post Form – Registration Form – Profile Form for User…

Priority LOW 37

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability ch…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00725 Published 2024-03-07 No fix listed CWE-862
Open these records in search →