Read the docs

ThemeNcode

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ThemeNcode records in CISA KEV

No ThemeNcode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tnc Flipbook 1 record LOW Tnc Pdf Viewer 1 record LOW

Records

4 records

TI-2024-16554 CVE-2024-25097 · GHSA-g56g-7xj2-6p9w

WordPress TNC PDF viewer Plugin <= 2.8.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 2.8.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00419 Published 2024-03-13 No fix listed CWE-79
TI-2025-26251 CVE-2025-39509 · GHSA-26rj-c885-v2wv

WordPress TNC FlipBook plugin <= 12.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode TNC FlipBook pdf-viewer-for-wordpress allows Stored XSS.This issue affects TNC FlipBook: from n/a through <…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00263 Published 2025-05-16 No fix listed CWE-79
TI-2024-31690 CVE-2024-47372 · GHSA-p9g4-pcwc-rwv6

WordPress TNC PDF viewer plugin <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeNcode LLC TNC PDF viewer allows Stored XSS.This issue affects TNC PDF viewer: from n/a through 3.1.0.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00275 Published 2024-10-05 No fix listed CWE-79
TI-2024-22276 CVE-2024-33695 · GHSA-j2pj-rx5h-324m

WordPress Fan Page Widget by ThemeNcode plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNcode Fan Page Widget by ThemeNcode allows Stored XSS.This issue affects Fan Page Widget by ThemeNcode: from n/a…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00338 Published 2024-04-26 No fix listed CWE-79
Open these records in search →