Read the docs

themescoder

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

themescoder records in CISA KEV

No themescoder vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Themes Coder 1 record HIGH

Records

1 record in Themes Coder · all components

TI-2024-12765 CVE-2024-13726 · GHSA-x374-f9hj-5h8v

Themes Coder <= 1.3.4 - Unauthenticated SQLi

Priority HIGH 72

The Coder WordPress plugin through 1.3.4 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01987 Published 2025-02-17 No fix listed CWE-89
Open these records in search →