Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Cpothemes Clear all filters
TI-2024-28981 CVE-2024-43329 · GHSA-r4w3-pwg3-xq9r

WordPress Allegiant theme <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Chill Allegiant allegiant allows Stored XSS.This issue affects Allegiant: from n/a through 1.2.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-08-18 No fix listed CWE-79
TI-2020-18879 CVE-2020-36708 · GHSA-48h4-c5mw-4h8j

Epsilon Framework Themes (Various Versions) - Function Injection

Priority CRITICAL 85

The following themes for WordPress are vulnerable to Function Injections in versions up to and including Shapely <= 1.2.7, NewsMag <= 2.4.1, Activello <= 1.4.0, Illdy <= 2.1.4, Allegiant <= 1.2.2, Newspaper X <= 1.3.1, P…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.65342 Published 2023-06-07 No fix listed CWE-94