Vulnerabilities

TI-2023-18341 CVE-2023-36502 · GHSA-9mww-h6fc-qrp2

WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in cththemes Balkon plugin <= 1.3.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00406 Published 2023-07-25 No fix listed CWE-79

TI-2023-13810 CVE-2023-29430 · GHSA-6739-rc8p-mjwj

WordPress TheRoof Theme <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CTHthemes TheRoof theme <= 1.0.3 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-26 No fix listed CWE-79

TI-2023-13648 CVE-2023-29236 · GHSA-3x73-qc77-ff3v

WordPress Outdoor Theme <= 3.9.6 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Outdoor theme <= 3.9.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-04-07 No fix listed CWE-79

TI-2023-10514 CVE-2023-25041 · GHSA-4g7h-rf8x-fpv7

WordPress Monolit Theme <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Cththemes Monolit theme <= 2.0.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00408 Published 2023-04-07 No fix listed CWE-79

TI-2019-14573 CVE-2019-20212 · GHSA-4h97-gx53-pcm9

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2…

LOW 32

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via the chat widget/page message form.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02582 Published 2020-01-13 No fix listed CWE-79

TI-2019-14572 CVE-2019-20211 · GHSA-6hmw-w52h-pcpw

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2…

LOW 32

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Persistent XSS via Listing Address, Listing Latitude, Listing Longitude, Email Address, Description, Name, J…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02582 Published 2020-01-13 No fix listed CWE-79

TI-2019-14571 CVE-2019-20210 · GHSA-v397-vfwx-wp6x

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2…

LOW 33

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow Reflected XSS via a search query.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03243 Published 2020-01-13 No fix listed CWE-79

TI-2019-14570 CVE-2019-20209 · GHSA-wp3p-4fj8-x356

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2…

LOW 39

The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0317 Published 2020-01-13 No fix listed CWE-639

Vulnerabilities

Filters