Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Developers Italia Clear all filters
TI-2026-60455 CVE-2026-89307 · GHSA-wfjc-xr6c-c6vw

HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme

Priority LOW 23

The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-c…

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00364 Published 2026-09-15 No fix listed CWE-601
TI-2026-59914 CVE-2026-87793 · GHSA-m59h-9rxw-9jx5

Reflected XSS in WordPress theme design-scuole-wordpress-theme

Priority LOW 24

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00508 Published 2026-09-15 No fix listed CWE-79
TI-2026-59913 CVE-2026-87792 · GHSA-28h8-rc7c-m27v

Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme

Priority MEDIUM 44

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00462 Published 2026-09-15 No fix listed CWE-200