Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: codetipi Clear all filters
TI-2026-18966 CVE-2026-23544 · GHSA-xprw-mh67-9xf5

WordPress Valenti theme <= 5.6.3.5 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in codetipi Valenti valenti allows Object Injection.This issue affects Valenti: from n/a through <= 5.6.3.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00409 Published 2026-02-19 No fix listed CWE-502
TI-2025-39169 CVE-2025-63021 · GHSA-5g6x-4m6w-r256

WordPress Valenti Engine plugin <= 1.0.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in codetipi Valenti Engine valenti-engine allows DOM-Based XSS.This issue affects Valenti Engine: from n/a through <= 1.0…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00193 Published 2025-12-31 No fix listed CWE-79
TI-2020-18746 CVE-2020-36510 · GHSA-rmfp-978v-2wq8

15Zine < 3.3.0 - Reflected Cross-Site Scripting

Priority LOW 32

The 15Zine WordPress theme before 3.3.0 does not sanitise and escape the cbi parameter before outputing it back in the response via the cb_s_a AJAX action, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0259 Published 2022-02-28 Fixed in 3.3.0 CWE-79