Read the docs

UnitedThemes

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

UnitedThemes records in CISA KEV

No UnitedThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Brooklyn 2 records MEDIUM Shortcodes 1 record LOW

Records

4 records

TI-2024-16433 CVE-2024-24926 · GHSA-69rp-qxv8-mf6r

WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to PHP Object Injection

Priority MEDIUM 42

Deserialization of Untrusted Data vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme.This issue affects Brooklyn | Creative Multi-Purpose Responsive WordPress Theme: from n/a throu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01089 Published 2024-02-12 No fix listed CWE-502
TI-2024-24626 CVE-2024-37097 · GHSA-47hg-8ph5-gr87

WordPress Shortcodes by United Themes plugin < 5.0.5 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in UnitedThemes Shortcodes by United Themes allows Reflected XSS.This issue affects Shortcodes by United Themes: f…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00288 Published 2024-07-22 Fixed in 5.0.5 CWE-79
TI-2024-16434 CVE-2024-24927 · GHSA-xvc2-c7vg-fwrq

WordPress Brooklyn Theme <= 4.9.7.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UnitedThemes Brooklyn | Creative Multi-Purpose Responsive WordPress Theme allows Reflected XSS.This issue affects Broo…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2024-02-12 No fix listed CWE-79
Open these records in search →