Multiple Themes - Reflected XSS
Priority LOW 29Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.
Why it matters now
EPSS 0.01011 63rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed Arendelle (Unknown): 1.1.13Bazaar Lite (Unknown): 1.8.6+20 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Unknown | Aapna | up to 1.3 | — | No fix listed | CNA |
| Unknown | Anand | up to 1.2 | — | No fix listed | CNA |
| Unknown | Anfaust | up to 1.1 | — | No fix listed | CNA |
| Unknown | Arendelle | before 1.1.13 | 1.1.13 | Patch available | CNA |
| Unknown | Atlast Business | up to 1.5.8.5 | — | No fix listed | CNA |
| Unknown | Bazaar Lite | before 1.8.6 | 1.8.6 | Patch available | CNA |
| Unknown | Brain Power | up to 1.2 | — | No fix listed | CNA |
| Unknown | BunnyPressLite | before 2.1 | 2.1 | Patch available | CNA |
| Unknown | Cafe Bistro | before 1.1.4 | 1.1.4 | Patch available | CNA |
| Unknown | College | before 1.5.1 | 1.5.1 | Patch available | CNA |
| Unknown | Connections Reloaded | up to 3.1 | — | No fix listed | CNA |
| Unknown | Counterpoint | up to 1.8.1 | — | No fix listed | CNA |
| Unknown | Digitally | up to 1.0.8 | — | No fix listed | CNA |
| Unknown | Directory | before 3.0.2 | 3.0.2 | Patch available | CNA |
| Unknown | Drop | before 1.22 | 1.22 | Patch available | CNA |
| Unknown | Everse | before 1.2.4 | 1.2.4 | Patch available | CNA |
| Unknown | Fashionable Store | up to 1.3.4 | — | No fix listed | CNA |
| Unknown | Fullbase | before 1.2.1 | 1.2.1 | Patch available | CNA |
| Unknown | Ilex | before 1.4.2 | 1.4.2 | Patch available | CNA |
| Unknown | Js O3 Lite | up to 1.5.8.2 | — | No fix listed | CNA |
| Unknown | Js Paper | up to 2.5.7 | — | No fix listed | CNA |
| Unknown | Kata | before 1.2.9 | 1.2.9 | Patch available | CNA |
| Unknown | Kata App | up to 1.0.5 | — | No fix listed | CNA |
| Unknown | Kata Business | up to 1.0.2 | — | No fix listed | CNA |
| Unknown | Looki Lite | before 1.3.0 | 1.3.0 | Patch available | CNA |
| Unknown | moseter | up to 1.3.1 | — | No fix listed | CNA |
| Unknown | Nokke | before 1.2.4 | 1.2.4 | Patch available | CNA |
| Unknown | Nothing Personal | up to 1.0.7 | — | No fix listed | CNA |
| Unknown | Offset Writing | up to 1.2 | — | No fix listed | CNA |
| Unknown | Opor Ayam | up to 1.8 | — | No fix listed | CNA |
| Unknown | Pinzolo | before 1.2.10 | 1.2.10 | Patch available | CNA |
| Unknown | Plato | before 1.1.9 | 1.1.9 | Patch available | CNA |
| Unknown | Polka Dots | up to 1.2 | — | No fix listed | CNA |
| Unknown | Purity Of Soul | up to 1.9 | — | No fix listed | CNA |
| Unknown | Restaurant PT | before 1.1.3 | 1.1.3 | Patch available | CNA |
| Unknown | Saul | before 1.1.0 | 1.1.0 | Patch available | CNA |
| Unknown | Sean Lite | before 1.4.6 | 1.4.6 | Patch available | CNA |
| Unknown | Tantyyellow | up to 1.0.0.5 | — | No fix listed | CNA |
| Unknown | TIJAJI | up to 1.43 | — | No fix listed | CNA |
| Unknown | Tiki Time | up to 1.3 | — | No fix listed | CNA |
| Unknown | Tuaug4 | up to 1.4 | — | No fix listed | CNA |
| Unknown | Tydskrif | up to 1.1.3 | — | No fix listed | CNA |
| Unknown | UltraLight | up to 1.2 | — | No fix listed | CNA |
| Unknown | Venice Lite | before 1.5.5 | 1.5.5 | Patch available | CNA |
| Unknown | Viala | up to 1.3.1 | — | No fix listed | CNA |
| Unknown | viburno | before 1.3.2 | 1.3.2 | Patch available | CNA |
| Unknown | Wedding Bride | before 1.0.2 | 1.0.2 | Patch available | CNA |
| Unknown | Wlow | before 1.2.7 | 1.2.7 | Patch available | CNA |
- Aapna VendorUnknown Affected up to 1.3 Fixed in — No fix listed CNA
- Anand VendorUnknown Affected up to 1.2 Fixed in — No fix listed CNA
- Anfaust VendorUnknown Affected up to 1.1 Fixed in — No fix listed CNA
- Arendelle VendorUnknown Affected before 1.1.13 Fixed in 1.1.13 Patch available CNA
- Atlast Business VendorUnknown Affected up to 1.5.8.5 Fixed in — No fix listed CNA
- Bazaar Lite VendorUnknown Affected before 1.8.6 Fixed in 1.8.6 Patch available CNA
- Brain Power VendorUnknown Affected up to 1.2 Fixed in — No fix listed CNA
- BunnyPressLite VendorUnknown Affected before 2.1 Fixed in 2.1 Patch available CNA
- Cafe Bistro VendorUnknown Affected before 1.1.4 Fixed in 1.1.4 Patch available CNA
- College VendorUnknown Affected before 1.5.1 Fixed in 1.5.1 Patch available CNA
- Connections Reloaded VendorUnknown Affected up to 3.1 Fixed in — No fix listed CNA
- Counterpoint VendorUnknown Affected up to 1.8.1 Fixed in — No fix listed CNA
- Digitally VendorUnknown Affected up to 1.0.8 Fixed in — No fix listed CNA
- Directory VendorUnknown Affected before 3.0.2 Fixed in 3.0.2 Patch available CNA
- Drop VendorUnknown Affected before 1.22 Fixed in 1.22 Patch available CNA
- Everse VendorUnknown Affected before 1.2.4 Fixed in 1.2.4 Patch available CNA
- Fashionable Store VendorUnknown Affected up to 1.3.4 Fixed in — No fix listed CNA
- Fullbase VendorUnknown Affected before 1.2.1 Fixed in 1.2.1 Patch available CNA
- Ilex VendorUnknown Affected before 1.4.2 Fixed in 1.4.2 Patch available CNA
- Js O3 Lite VendorUnknown Affected up to 1.5.8.2 Fixed in — No fix listed CNA
- Js Paper VendorUnknown Affected up to 2.5.7 Fixed in — No fix listed CNA
- Kata VendorUnknown Affected before 1.2.9 Fixed in 1.2.9 Patch available CNA
- Kata App VendorUnknown Affected up to 1.0.5 Fixed in — No fix listed CNA
- Kata Business VendorUnknown Affected up to 1.0.2 Fixed in — No fix listed CNA
- Looki Lite VendorUnknown Affected before 1.3.0 Fixed in 1.3.0 Patch available CNA
- moseter VendorUnknown Affected up to 1.3.1 Fixed in — No fix listed CNA
- Nokke VendorUnknown Affected before 1.2.4 Fixed in 1.2.4 Patch available CNA
- Nothing Personal VendorUnknown Affected up to 1.0.7 Fixed in — No fix listed CNA
- Offset Writing VendorUnknown Affected up to 1.2 Fixed in — No fix listed CNA
- Opor Ayam VendorUnknown Affected up to 1.8 Fixed in — No fix listed CNA
- Pinzolo VendorUnknown Affected before 1.2.10 Fixed in 1.2.10 Patch available CNA
- Plato VendorUnknown Affected before 1.1.9 Fixed in 1.1.9 Patch available CNA
- Polka Dots VendorUnknown Affected up to 1.2 Fixed in — No fix listed CNA
- Purity Of Soul VendorUnknown Affected up to 1.9 Fixed in — No fix listed CNA
- Restaurant PT VendorUnknown Affected before 1.1.3 Fixed in 1.1.3 Patch available CNA
- Saul VendorUnknown Affected before 1.1.0 Fixed in 1.1.0 Patch available CNA
- Sean Lite VendorUnknown Affected before 1.4.6 Fixed in 1.4.6 Patch available CNA
- Tantyyellow VendorUnknown Affected up to 1.0.0.5 Fixed in — No fix listed CNA
- TIJAJI VendorUnknown Affected up to 1.43 Fixed in — No fix listed CNA
- Tiki Time VendorUnknown Affected up to 1.3 Fixed in — No fix listed CNA
- Tuaug4 VendorUnknown Affected up to 1.4 Fixed in — No fix listed CNA
- Tydskrif VendorUnknown Affected up to 1.1.3 Fixed in — No fix listed CNA
- UltraLight VendorUnknown Affected up to 1.2 Fixed in — No fix listed CNA
- Venice Lite VendorUnknown Affected before 1.5.5 Fixed in 1.5.5 Patch available CNA
- Viala VendorUnknown Affected up to 1.3.1 Fixed in — No fix listed CNA
- viburno VendorUnknown Affected before 1.3.2 Fixed in 1.3.2 Patch available CNA
- Wedding Bride VendorUnknown Affected before 1.0.2 Fixed in 1.0.2 Patch available CNA
- Wlow VendorUnknown Affected before 1.2.7 Fixed in 1.2.7 Patch available CNA
CPE configurations NVD · 46
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:* | up to 3.1 | Vulnerable | Ajay D'Souza |
| cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:* | up to 1.5.8.5 | Vulnerable | Archimidismertzanos |
| cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:* | up to 1.3.4 | Vulnerable | Archimidismertzanos |
| cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:* | up to 1.0.7 | Vulnerable | Archimidismertzanos |
| cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:* | up to 1.2 | Vulnerable | Arthousewebdesign |
| cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:* | up to 1.3.1 | Vulnerable | Asmedia |
| cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:* | up to 1.4 | Vulnerable | Asmedia |
| cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:* | before 1.1.4 | Vulnerable | AyeCode Ltd |
| cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:* | before 1.5.1 | Vulnerable | AyeCode Ltd |
| cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:* | before 3.0.2 | Vulnerable | AyeCode Ltd |
- cpe:2.3:a:ajaydsouza:connections_reloaded:*:*:*:*:*:wordpress:*:* Versions up to 3.1 Vulnerable ·Ajay D'Souza
- cpe:2.3:a:archimidismertzanos:atlast_business:*:*:*:*:*:wordpress:*:* Versions up to 1.5.8.5 Vulnerable ·Archimidismertzanos
- cpe:2.3:a:archimidismertzanos:fashionable_store:*:*:*:*:*:wordpress:*:* Versions up to 1.3.4 Vulnerable ·Archimidismertzanos
- cpe:2.3:a:archimidismertzanos:nothing_personal:*:*:*:*:*:wordpress:*:* Versions up to 1.0.7 Vulnerable ·Archimidismertzanos
- cpe:2.3:a:arthousewebdesign:brain_power:*:*:*:*:*:wordpress:*:* Versions up to 1.2 Vulnerable ·Arthousewebdesign
- cpe:2.3:a:asmedia:moseter:*:*:*:*:*:wordpress:*:* Versions up to 1.3.1 Vulnerable ·Asmedia
- cpe:2.3:a:asmedia:tuaug4:*:*:*:*:*:wordpress:*:* Versions up to 1.4 Vulnerable ·Asmedia
- cpe:2.3:a:ayecode:cafe_bistro:*:*:*:*:*:wordpress:*:* Versions before 1.1.4 Vulnerable ·AyeCode Ltd
- cpe:2.3:a:ayecode:college:*:*:*:*:*:wordpress:*:* Versions before 1.5.1 Vulnerable ·AyeCode Ltd
- cpe:2.3:a:ayecode:directory:*:*:*:*:*:wordpress:*:* Versions before 3.0.2 Vulnerable ·AyeCode Ltd
Show 36 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ayecode:plato:*:*:*:*:*:wordpress:*:* | before 1.1.9 | Vulnerable | AyeCode Ltd |
| cpe:2.3:a:ayecode:restaurant_pt:*:*:*:*:*:wordpress:*:* | before 1.1.3 | Vulnerable | AyeCode Ltd |
| cpe:2.3:a:ayecode:wedding_bride:*:*:*:*:*:wordpress:*:* | before 1.0.2 | Vulnerable | AyeCode Ltd |
| cpe:2.3:a:climaxthemes:kata:*:*:*:*:*:wordpress:*:* | before 1.2.9 | Vulnerable | Climax Themes |
| cpe:2.3:a:competethemes:drop:*:*:*:*:*:wordpress:*:* | before 1.22 | Vulnerable | Competethemes |
| cpe:2.3:a:davidgarlitz:viala:*:*:*:*:*:wordpress:*:* | up to 1.3.1 | Vulnerable | David Garlitz |
| cpe:2.3:a:deothemes:arendelle:*:*:*:*:*:wordpress:*:* | before 1.1.13 | Vulnerable | deothemes |
| cpe:2.3:a:deothemes:everse:*:*:*:*:*:wordpress:*:* | before 1.2.4 | Vulnerable | deothemes |
| cpe:2.3:a:deothemes:nokke:*:*:*:*:*:wordpress:*:* | before 1.2.4 | Vulnerable | deothemes |
| cpe:2.3:a:dotecsa:ilex:*:*:*:*:*:wordpress:*:* | before 1.4.2 | Vulnerable | Dotecsa |
| cpe:2.3:a:dotecsa:viburno:*:*:*:*:*:wordpress:*:* | before 1.3.2 | Vulnerable | Dotecsa |
| cpe:2.3:a:fredriksoerlie:ultralight:*:*:*:*:*:wordpress:*:* | up to 1.2 | Vulnerable | Fredriksoerlie |
| cpe:2.3:a:fyrewurks:polka_dots:*:*:*:*:*:wordpress:*:* | up to 1.2 | Vulnerable | fyrewurks |
| cpe:2.3:a:fyrewurks:tiki_time:*:*:*:*:*:wordpress:*:* | up to 1.3 | Vulnerable | fyrewurks |
| cpe:2.3:a:henleythemes:counterpoint:*:*:*:*:*:wordpress:*:* | up to 1.8.1 | Vulnerable | Henleythemes |
| cpe:2.3:a:iznyn:opor_ayam:*:*:*:*:*:wordpress:*:* | up to 1.8 | Vulnerable | Iznyn |
| cpe:2.3:a:iznyn:purity_of_soul:*:*:*:*:*:wordpress:*:* | up to 1.9 | Vulnerable | Iznyn |
| cpe:2.3:a:jinwen:js_o3_lite:*:*:*:*:*:wordpress:*:* | up to 1.5.8.2 | Vulnerable | Jinwen |
| cpe:2.3:a:jinwen:js_paper:*:*:*:*:*:wordpress:*:* | up to 2.5.7 | Vulnerable | Jinwen |
| cpe:2.3:a:marchettidesign:fullbase:*:*:*:*:*:wordpress:*:* | before 1.2.1 | Vulnerable | Marchetti Design |
| cpe:2.3:a:marchettidesign:wlow:*:*:*:*:*:wordpress:*:* | before 1.2.7 | Vulnerable | Marchetti Design |
| cpe:2.3:a:omarfolgheraiter:digitally:*:*:*:*:*:wordpress:*:* | up to 1.0.8 | Vulnerable | Omarfolgheraiter |
| cpe:2.3:a:saumendra:aapna:*:*:*:*:*:wordpress:*:* | up to 1.3 | Vulnerable | Saumendra |
| cpe:2.3:a:saumendra:anand:*:*:*:*:*:wordpress:*:* | up to 1.2 | Vulnerable | Saumendra |
| cpe:2.3:a:ta2g:tantyyellow:*:*:*:*:*:wordpress:*:* | up to 1.0.0.5 | Vulnerable | ta2g |
| cpe:2.3:a:themeinprogress:bazaar_lite:*:*:*:*:*:wordpress:*:* | before 1.8.6 | Vulnerable | ThemeinProgress |
| cpe:2.3:a:themeinprogress:looki_lite:*:*:*:*:*:wordpress:*:* | before 1.3.0 | Vulnerable | ThemeinProgress |
| cpe:2.3:a:themeinprogress:saul:*:*:*:*:*:wordpress:*:* | before 1.1.0 | Vulnerable | ThemeinProgress |
| cpe:2.3:a:themeinprogress:saul_lite:*:*:*:*:*:wordpress:*:* | before 1.4.6 | Vulnerable | ThemeinProgress |
| cpe:2.3:a:themeinprogress:venice_lite:*:*:*:*:*:wordpress:*:* | up to 1.5.5 | Vulnerable | ThemeinProgress |
| cpe:2.3:a:thewebhunter:anfaust:*:*:*:*:*:wordpress:*:* | up to 1.1 | Vulnerable | Thewebhunter |
| cpe:2.3:a:thewebhunter:offset_writing:*:*:*:*:*:wordpress:*:* | up to 1.2 | Vulnerable | Thewebhunter |
| cpe:2.3:a:thriveweb:pinzolo:*:*:*:*:*:wordpress:*:* | before 1.2.10 | Vulnerable | Thriveweb |
| cpe:2.3:a:tijaji:tijaji:*:*:*:*:*:wordpress:*:* | up to 1.43 | Vulnerable | tijaji |
| cpe:2.3:a:wpmole:tydskrif:*:*:*:*:*:wordpress:*:* | up to 1.1.3 | Vulnerable | Wpmole |
| cpe:2.3:a:yws:bunnypress_lite:*:*:*:*:*:wordpress:*:* | up to 2.1 | Vulnerable | Yws |
- cpe:2.3:a:ayecode:plato:*:*:*:*:*:wordpress:*:* Versions before 1.1.9 Vulnerable ·AyeCode Ltd
- cpe:2.3:a:ayecode:restaurant_pt:*:*:*:*:*:wordpress:*:* Versions before 1.1.3 Vulnerable ·AyeCode Ltd
- cpe:2.3:a:ayecode:wedding_bride:*:*:*:*:*:wordpress:*:* Versions before 1.0.2 Vulnerable ·AyeCode Ltd
- cpe:2.3:a:climaxthemes:kata:*:*:*:*:*:wordpress:*:* Versions before 1.2.9 Vulnerable ·Climax Themes
- cpe:2.3:a:competethemes:drop:*:*:*:*:*:wordpress:*:* Versions before 1.22 Vulnerable ·Competethemes
- cpe:2.3:a:davidgarlitz:viala:*:*:*:*:*:wordpress:*:* Versions up to 1.3.1 Vulnerable ·David Garlitz
- cpe:2.3:a:deothemes:arendelle:*:*:*:*:*:wordpress:*:* Versions before 1.1.13 Vulnerable ·deothemes
- cpe:2.3:a:deothemes:everse:*:*:*:*:*:wordpress:*:* Versions before 1.2.4 Vulnerable ·deothemes
- cpe:2.3:a:deothemes:nokke:*:*:*:*:*:wordpress:*:* Versions before 1.2.4 Vulnerable ·deothemes
- cpe:2.3:a:dotecsa:ilex:*:*:*:*:*:wordpress:*:* Versions before 1.4.2 Vulnerable ·Dotecsa
- cpe:2.3:a:dotecsa:viburno:*:*:*:*:*:wordpress:*:* Versions before 1.3.2 Vulnerable ·Dotecsa
- cpe:2.3:a:fredriksoerlie:ultralight:*:*:*:*:*:wordpress:*:* Versions up to 1.2 Vulnerable ·Fredriksoerlie
- cpe:2.3:a:fyrewurks:polka_dots:*:*:*:*:*:wordpress:*:* Versions up to 1.2 Vulnerable ·fyrewurks
- cpe:2.3:a:fyrewurks:tiki_time:*:*:*:*:*:wordpress:*:* Versions up to 1.3 Vulnerable ·fyrewurks
- cpe:2.3:a:henleythemes:counterpoint:*:*:*:*:*:wordpress:*:* Versions up to 1.8.1 Vulnerable ·Henleythemes
- cpe:2.3:a:iznyn:opor_ayam:*:*:*:*:*:wordpress:*:* Versions up to 1.8 Vulnerable ·Iznyn
- cpe:2.3:a:iznyn:purity_of_soul:*:*:*:*:*:wordpress:*:* Versions up to 1.9 Vulnerable ·Iznyn
- cpe:2.3:a:jinwen:js_o3_lite:*:*:*:*:*:wordpress:*:* Versions up to 1.5.8.2 Vulnerable ·Jinwen
- cpe:2.3:a:jinwen:js_paper:*:*:*:*:*:wordpress:*:* Versions up to 2.5.7 Vulnerable ·Jinwen
- cpe:2.3:a:marchettidesign:fullbase:*:*:*:*:*:wordpress:*:* Versions before 1.2.1 Vulnerable ·Marchetti Design
- cpe:2.3:a:marchettidesign:wlow:*:*:*:*:*:wordpress:*:* Versions before 1.2.7 Vulnerable ·Marchetti Design
- cpe:2.3:a:omarfolgheraiter:digitally:*:*:*:*:*:wordpress:*:* Versions up to 1.0.8 Vulnerable ·Omarfolgheraiter
- cpe:2.3:a:saumendra:aapna:*:*:*:*:*:wordpress:*:* Versions up to 1.3 Vulnerable ·Saumendra
- cpe:2.3:a:saumendra:anand:*:*:*:*:*:wordpress:*:* Versions up to 1.2 Vulnerable ·Saumendra
- cpe:2.3:a:ta2g:tantyyellow:*:*:*:*:*:wordpress:*:* Versions up to 1.0.0.5 Vulnerable ·ta2g
- cpe:2.3:a:themeinprogress:bazaar_lite:*:*:*:*:*:wordpress:*:* Versions before 1.8.6 Vulnerable ·ThemeinProgress
- cpe:2.3:a:themeinprogress:looki_lite:*:*:*:*:*:wordpress:*:* Versions before 1.3.0 Vulnerable ·ThemeinProgress
- cpe:2.3:a:themeinprogress:saul:*:*:*:*:*:wordpress:*:* Versions before 1.1.0 Vulnerable ·ThemeinProgress
- cpe:2.3:a:themeinprogress:saul_lite:*:*:*:*:*:wordpress:*:* Versions before 1.4.6 Vulnerable ·ThemeinProgress
- cpe:2.3:a:themeinprogress:venice_lite:*:*:*:*:*:wordpress:*:* Versions up to 1.5.5 Vulnerable ·ThemeinProgress
- cpe:2.3:a:thewebhunter:anfaust:*:*:*:*:*:wordpress:*:* Versions up to 1.1 Vulnerable ·Thewebhunter
- cpe:2.3:a:thewebhunter:offset_writing:*:*:*:*:*:wordpress:*:* Versions up to 1.2 Vulnerable ·Thewebhunter
- cpe:2.3:a:thriveweb:pinzolo:*:*:*:*:*:wordpress:*:* Versions before 1.2.10 Vulnerable ·Thriveweb
- cpe:2.3:a:tijaji:tijaji:*:*:*:*:*:wordpress:*:* Versions up to 1.43 Vulnerable ·tijaji
- cpe:2.3:a:wpmole:tydskrif:*:*:*:*:*:wordpress:*:* Versions up to 1.1.3 Vulnerable ·Wpmole
- cpe:2.3:a:yws:bunnypress_lite:*:*:*:*:*:wordpress:*:* Versions up to 2.1 Vulnerable ·Yws
Remediation
- Fix · CNA Arendelle (Unknown) Fixed in 1.1.13
- Fix · CNA Bazaar Lite (Unknown) Fixed in 1.8.6
- Fix · CNA BunnyPressLite (Unknown) Fixed in 2.1
- Fix · CNA Cafe Bistro (Unknown) Fixed in 1.1.4
- Fix · CNA College (Unknown) Fixed in 1.5.1
- Fix · CNA Directory (Unknown) Fixed in 3.0.2
- Fix · CNA Drop (Unknown) Fixed in 1.22
- Fix · CNA Everse (Unknown) Fixed in 1.2.4
- Fix · CNA Fullbase (Unknown) Fixed in 1.2.1
- Fix · CNA Ilex (Unknown) Fixed in 1.4.2
- Fix · CNA Kata (Unknown) Fixed in 1.2.9
- Fix · CNA Looki Lite (Unknown) Fixed in 1.3.0
- Fix · CNA Nokke (Unknown) Fixed in 1.2.4
- Fix · CNA Pinzolo (Unknown) Fixed in 1.2.10
- Fix · CNA Plato (Unknown) Fixed in 1.1.9
- Fix · CNA Restaurant PT (Unknown) Fixed in 1.1.3
- Fix · CNA Saul (Unknown) Fixed in 1.1.0
- Fix · CNA Sean Lite (Unknown) Fixed in 1.4.6
- Fix · CNA Venice Lite (Unknown) Fixed in 1.5.5
- Fix · CNA viburno (Unknown) Fixed in 1.3.2
- Fix · CNA Wedding Bride (Unknown) Fixed in 1.0.2
- Fix · CNA Wlow (Unknown) Fixed in 1.2.7
Timeline
- 2026-10-02 Threatist record created from CVE-2023-2813
- 2026-10-03 Alias added: GHSA-8mw6-p3x4-67qj
References
Sources
- CVE-2023-2813 · CVE Program
- CVE-2023-2813 · NVD
- FIRST EPSS
- GHSA-8mw6-p3x4-67qj · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences