Read the docs

VW THEMES

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

VW THEMES records in CISA KEV

No VW THEMES vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Vw Storefront 1 record LOW

Records

1 record in Vw Storefront · all components

TI-2024-12725 CVE-2024-13686 · GHSA-qqpx-3x4j-2pwg

VW Storefront <= 0.9.9 - Missing Authorization to Authenticated (Subscriber+) Settings Reset

Priority LOW 20

The VW Storefront theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the vw_storefront_reset_all_settings() function in all versions up to, and including, 0.9.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00291 Published 2025-03-04 No fix listed CWE-862
Open these records in search →