Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: cmsmasters Clear all filters
TI-2026-20444 CVE-2026-25326 · GHSA-4cfj-pm5j-9qhf

WordPress CMSMasters Content Composer plugin <= 1.4.5 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows PHP Local File Inclusion.…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00435 Published 2026-02-19 No fix listed CWE-98
TI-2026-18969 CVE-2026-23547 · GHSA-6c3h-gxfp-37vm

WordPress CMSMasters Content Composer plugin <= 2.5.8 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in cmsmasters CMSMasters Content Composer cmsmasters-content-composer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CMSMasters Content Comp…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00245 Published 2026-02-19 No fix listed CWE-862
TI-2025-00807 CVE-2025-0952 · GHSA-qh8m-rjmq-3cgm

Missing authorization in cmsmasters Eco Nature - Environment & Ecology WordPress Theme

Priority LOW 35

The Eco Nature - Environment & Ecology WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cmsmasters_hide…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00328 Published 2025-03-14 No fix listed CWE-862
TI-2025-00429 CVE-2025-0515 · GHSA-x7j3-rmwr-2rrx

Missing authorization in cmsmasters Buzz Club – Night Club, DJ and Music Festival Event…

Priority LOW 20

The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00246 Published 2025-01-18 No fix listed CWE-862
TI-2024-08992 CVE-2024-9694 · GHSA-5wc4-pq8p-wrvp

CMSMasters Elementor Addon <= 1.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

Priority LOW 28

The CMSMasters Elementor Addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 1.14.7 due to insufficient input sanitization and output escapin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00267 Published 2024-12-03 No fix listed CWE-79
TI-2024-07382 CVE-2024-7963 · GHSA-p48h-67f9-p6jq

CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 28

The CMSMasters Content Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's multiple shortcodes in all versions up to, and including, 1.8.8 due to insufficient input sanitization an…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00273 Published 2024-10-09 No fix listed CWE-79