Read the docs

themeum

Records172All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high48CVSS 7.0–8.9

Exploited now

themeum records in CISA KEV

No themeum vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tutor Lms 49 records HIGH Wp Crowdfunding 11 records MEDIUM Qubely 6 records HIGH Droip 4 records MEDIUM Tutor Lms Elementor Addons 4 records LOW Wp Page Builder 4 records MEDIUM Tutor Lms - Migration Tool 2 records LOW

Records

4 records in Wp Page Builder · all components

TI-2022-03510 CVE-2022-3830 · GHSA-w6hf-m4jf-9v6x

WP Page Builder <= 1.2.8 - Admin+ Stored Cross-Site

Priority MEDIUM 55

The WP Page Builder WordPress plugin through 1.2.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-05 No fix listed
TI-2021-06500 CVE-2021-24208 · GHSA-pf43-g47c-f3f8

WP Page Builder < 1.2.4 - Multiple Stored Cross-Site scripting (XSS)

Priority LOW 25

The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets (though th…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00658 Published 2021-04-05 Fixed in 1.2.4 CWE-79
TI-2021-06499 CVE-2021-24207 · GHSA-x6pg-q78v-fw5w

WP Page Builder < 1.2.4 - Insecure default configuration Allows Subscribers Editing Access to Posts

Priority LOW 21

By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00689 Published 2021-04-05 Fixed in 1.2.4 CWE-863
Open these records in search →