wpweaver

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wpweaver records in CISA KEV

No wpweaver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weaver Xtreme Theme Support 4 records HIGH Weaver Show Posts 1 record LOW Weaver Xtreme Theme 1 record LOW

Records

1 record in Weaver Xtreme Theme · all components

TI-2023-01327 CVE-2023-1403 · GHSA-5pjh-r243-252g

Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

LOW 29

The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to, and including, 5.0.7.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00531 Published 2023-06-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	10
Low	0
No CVSS	0