Read the docs

DeluxeThemes

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

DeluxeThemes records in CISA KEV

No DeluxeThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Userpro 16 records MEDIUM Media Manager 2 records MEDIUM User Pro 1 record HIGH

Records

2 records in Media Manager · all components

TI-2024-11883 CVE-2024-12822 · GHSA-v3v8-4cr7-2w3g

Media Manager for UserPro <= 3.12.0 - Missing Authorization to Unauthenticated Arbitrary Options Update

Priority MEDIUM 50

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the add_capto_img() function in all version…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00594 Published 2025-01-30 No fix listed CWE-862
TI-2024-11882 CVE-2024-12821 · GHSA-j4mf-rp8x-w2c3

Media Manager for UserPro <= 3.12.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The Media Manager for UserPro plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the upm_upload_media() function in all vers…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00367 Published 2025-01-30 No fix listed CWE-862
Open these records in search →