Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: AlThemist Clear all filters
TI-2024-12836 CVE-2024-13810 · GHSA-6pcr-vg7g-6rg7

Missing authorization in AlThemist Zass - WooCommerce Theme for Handmade Artists and…

Priority LOW 20

The Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'zass_import_zass' AJAX actions in all versions up to, and…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-03-05 No fix listed CWE-862
TI-2024-12837 CVE-2024-13811 · GHSA-5frw-r2fh-cmvg

Missing authorization in AlThemist Lafka - Multi Store Burger - Pizza & Food Delivery…

Priority LOW 20

The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_import_lafka' AJAX actions in all versions…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-03-05 No fix listed CWE-862