themeplugs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

themeplugs records in CISA KEV

No themeplugs vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-20135 CVE-2026-24950 · GHSA-mj9g-3f37-7qv2

WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through <= 1.0.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0029 Published 2026-02-20 No fix listed CWE-639

TI-2025-19877 CVE-2025-27006 · GHSA-xjwm-7c5r-6r68

WordPress Authorsy Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeplugs Authorsy authorsy allows Stored XSS.This issue affects Authorsy: from n/a through <= 1.0.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-09-26 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0