Read the docs

WooThemes

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WooThemes records in CISA KEV

No WooThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce 1 record LOW Woocommerce Plugin 1 record LOW

Records

3 records

TI-2019-16193 CVE-2019-25779 · GHSA-57gp-6fh6-hf38

Path traversal in WooThemes Diarise exposes local files

Priority HIGH 77

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00447 Published 2026-10-22 No fix listed CWE-22
TI-2014-05191 CVE-2014-6313 · GHSA-wq8m-rc75-vf5c

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the range parameter on the wc-reports page to wp-admin/admi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02023 Published 2014-10-14 No fix listed CWE-79
Open these records in search →