Themeqx

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Themeqx records in CISA KEV

No Themeqx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Letterpress 2 records MEDIUM

Records

2 records in Letterpress · all components

TI-2024-03345 CVE-2024-3590 · GHSA-hpj4-v4gg-8xfh

LetterPress <= 1.2.2 - Subscriber Deletion via CSRF

MEDIUM 60

The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00232 Published 2024-05-09 No fix listed CWE-352

TI-2023-12147 CVE-2023-27415 · GHSA-xp23-pr4w-q7fx

WordPress LetterPress Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0