Upperthemes

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Upperthemes records in CISA KEV

No Upperthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Swape 1 record MEDIUM

Records

1 record

TI-2018-14975 CVE-2018-21013 · GHSA-37m6-2cm3-x5m2

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated…

MEDIUM 46

The Swape theme before 1.2.1 for WordPress has incorrect access control, as demonstrated by allowing new administrator accounts via vectors involving xmlPath to wp-admin/admin-ajax.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01987 Published 2019-09-09 No fix listed CWE-269

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0