Vendors / Themeqx Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now Themeqx records in CISA KEV No Themeqx vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00232 · Published 2024-05-09 · No fix listed CWE-352
Priority LOW 30
Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.…
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00455 · Published 2025-04-01 · No fix listed CWE-862
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00369 · Published 2023-08-08 · No fix listed CWE-79
Priority LOW 26
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeqx LetterPress allows Stored XSS.This issue affects LetterPress: from n/a through 1.2.1.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00241 · Published 2024-05-08 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 0 4 0 0
THREATIST.IORead the docs