Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: aThemeArt Clear all filters
TI-2026-75318 CVE-2026-111413

aThemeArt Theme Helper WordPress plugin cross-site request forgery (CSRF)

Priority LOW 39

Cross-Site Request Forgery (CSRF) vulnerability in aThemeArt aThemeArt Theme Helper athemeart-theme-helper allows Cross Site Request Forgery.This issue affects aThemeArt Theme Helper: from n/a through 1.0.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00133 Published 2026-10-16 No fix listed CWE-352
TI-2025-22877 CVE-2025-31740 · GHSA-cp57-26m4-r4m3

WordPress News, Magazine and Blog Elements Plugin <= 1.3 - Stored Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aThemeArt News, Magazine and Blog Elements news-magazine-and-blog-elements allows Stored XSS.This issue affects News,…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00368 Published 2025-04-01 No fix listed CWE-79
TI-2025-16243 CVE-2025-22339 · GHSA-7442-pm7x-25q8

WordPress Store Commerce theme <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in athemeart Store Commerce store-commerce allows DOM-Based XSS.This issue affects Store Commerce: from n/a through <= 1.…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-07 No fix listed CWE-79