Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: MVPThemes Component: Zoxpress Clear all filters
TI-2024-12693 CVE-2024-13654 · GHSA-gvc6-5w8m-9mrj

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

Priority LOW 35

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' func…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00416 Published 2025-02-12 No fix listed CWE-862
TI-2024-12692 CVE-2024-13653 · GHSA-q7vg-367c-7g5v

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

Priority MEDIUM 41

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00519 Published 2025-02-12 No fix listed CWE-862