themelooks

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

themelooks records in CISA KEV

No themelooks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Mfolio · all components

TI-2024-08639 CVE-2024-9307 · GHSA-px29-mq7h-p287

MEDIUM 45

The mFolio Lite plugin for WordPress is vulnerable to file uploads due to a missing capability check in all versions up to, and including, 1.2.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00963 Published 2024-11-06 No fix listed CWE-434