Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: HaruTheme Clear all filters
TI-2025-37585 CVE-2025-60219 · GHSA-wmqf-w969-fg83

WordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme WooCommerce Designer Pro wc-designer-pro allows Upload a Web Shell to a Web Server.This issue affects WooCommerce Designer Pro: from n/a through…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00391 Published 2025-09-26 No fix listed CWE-434
TI-2025-37531 CVE-2025-60165 · GHSA-67hp-wrc2-hhpq

WordPress Frames Theme <= 1.5.7 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in HaruTheme Frames frames allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Frames: from n/a through <= 1.5.7.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00261 Published 2025-09-26 No fix listed CWE-862
TI-2025-31800 CVE-2025-49885 · GHSA-gv3g-5wrh-3x24

WordPress Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin <= 5.0.6 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in HaruTheme Drag and Drop Multiple File Upload (Pro) - WooCommerce drag-and-drop-file-upload-wc-pro allows Upload a Web Shell to a Web Server.This issue affe…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00408 Published 2025-06-27 No fix listed CWE-434