Vulnerabilities

TI-2025-17753 CVE-2025-23986 · GHSA-q2pv-8f62-27p3

WordPress Tiki Time theme <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/a through 1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00233 Published 2025-05-19 No fix listed CWE-79

TI-2025-16670 CVE-2025-22789 · GHSA-hw3m-mgfc-g5r4

WordPress polka dots theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks polka dots allows Reflected XSS.This issue affects polka dots: from n/a through 1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00233 Published 2025-05-19 No fix listed CWE-79

TI-2023-02635 CVE-2023-2813 · GHSA-8mw6-p3x4-67qj

Multiple Themes - Reflected XSS

LOW 29

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01011 Published 2023-09-04 Fixed in 1.1.13, 1.8.6 +19

Vulnerabilities

Filters

WordPress Tiki Time theme <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress polka dots theme <= 1.2 - Reflected Cross Site Scripting (XSS) vulnerability

Multiple Themes - Reflected XSS