Read the docs

Themographics

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Themographics records in CISA KEV

No Themographics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Listingo 1 record HIGH

Records

1 record in Listingo · all components

TI-2022-03596 CVE-2022-3921 · GHSA-frm5-37j3-v45h

Listingo < 3.2.7 - Unauthenticated Arbitrary File Upload

Priority HIGH 82

The Listingo WordPress theme before 3.2.7 does not validate files to be uploaded via an AJAX action available to unauthenticated users, which could allow them to upload arbitrary files and lead to RCE

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.21205 Published 2022-12-12 Fixed in 3.2.7
Open these records in search →