Vulnerabilities

TI-2023-06122 CVE-2023-6694 · GHSA-9265-rqwh-6m4g

Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

LOW 28

The Beaver Themer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 1.4.9 due to insufficient input sanitization and output escaping on…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00331 Published 2024-04-09 No fix listed CWE-79

TI-2023-06123 CVE-2023-6695 · GHSA-7pcc-7cq6-8v3x

Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode

LOW 29

The Beaver Themer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.9 via the 'wpbb' shortcode.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00521 Published 2024-04-09 No fix listed CWE-359

TI-2021-18953 CVE-2021-42749 · GHSA-h5m9-c2h6-x3rp

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content)…

LOW 26

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content) when viewing the post archives.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01106 Published 2022-01-07 No fix listed CWE-668

Vulnerabilities

Filters

Beaver Themer <= 1.4.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode

Beaver Themer <= 1.4.9 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode

In Beaver Themer, attackers can bypass conditional logic controls (for hiding content)…