themifyme

Records63All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical5CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

themifyme records in CISA KEV

No themifyme vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Builder 6 records MEDIUM Portfolio Post 5 records MEDIUM Ultra 5 records HIGH Woocommerce Product Filter 5 records MEDIUM Themify Shortcodes 3 records LOW Conditional Menus 1 record MEDIUM Framework 1 record MEDIUM Icons 1 record LOW

Records

1 record in Framework · all components

TI-2013-06217 CVE-2013-20002 · GHSA-v36r-qvwr-36m7

Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify…

MEDIUM 49

Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03875 Published 2021-06-17 No fix listed CWE-434

Open these records in search →

Critical	5
High	15
Medium	43
Low	0
No CVSS	0