Vulnerabilities

TI-2026-47319 CVE-2026-66648 · GHSA-mww2-cm7j-fqfv

WordPress Jawn theme <= 1.4.2 - Privilege Escalation vulnerability

MEDIUM 49

Unauthenticated Privilege Escalation in Jawn <= 1.4.2 versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00483 Published 2026-08-24 No fix listed CWE-266

TI-2026-47329 CVE-2026-66658 · GHSA-vwxj-24jr-658r

WordPress Reviewer plugin <= 3.14.2 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in Reviewer <= 3.14.2 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00357 Published 2026-08-13 No fix listed CWE-89

TI-2026-46649 CVE-2026-65479 · GHSA-h8wh-rjm5-g7rj

WordPress Reviewer plugin <= 3.14.2 - Broken Access Control vulnerability

LOW 24

Subscriber Broken Access Control in Reviewer <= 3.14.2 versions.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00287 Published 2026-07-23 No fix listed CWE-862

TI-2026-20566 CVE-2026-25454 · GHSA-w6x8-mjqg-7pwv

WordPress The League theme <= 4.4.1 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in MVPThemes The League the-league allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The League: from n/a through <= 4.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00342 Published 2026-03-25 No fix listed CWE-862

TI-2024-12694 CVE-2024-13655 · GHSA-fqx4-gh4h-f8q5

Missing authorization in MVPThemes Flex Mag - Responsive WordPress News Theme

LOW 35

The Flex Mag - Responsive WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_ajax_callbac…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00337 Published 2025-03-07 No fix listed CWE-862

TI-2024-12693 CVE-2024-13654 · GHSA-gvc6-5w8m-9mrj

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

LOW 35

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'reset_options' func…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00416 Published 2025-02-12 No fix listed CWE-862

TI-2024-12695 CVE-2024-13656 · GHSA-gfmh-r8qh-w25v

Missing authorization in MVPThemes Click Mag - Viral WordPress News Magazine/Blog Theme

LOW 36

The Click Mag - Viral WordPress News Magazine/Blog Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the propanel_of_aj…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00461 Published 2025-02-12 No fix listed CWE-862

TI-2024-12692 CVE-2024-13653 · GHSA-q7vg-367c-7g5v

Missing authorization in MVPThemes ZoxPress - The All-In-One WordPress News Theme

MEDIUM 41

The ZoxPress - The All-In-One WordPress News Theme theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00519 Published 2025-02-12 No fix listed CWE-862

TI-2024-12682 CVE-2024-13643 · GHSA-3h9j-fvqm-h724

Zox News <= 3.17.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Modification

MEDIUM 41

The Zox News - Professional WordPress News & Magazine Theme plugin for WordPress is vulnerable to unauthorized data modification.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00641 Published 2025-02-11 No fix listed CWE-862

TI-2024-11073 CVE-2024-11936 · GHSA-44w3-4x9p-xmff

Zox News <= 3.16.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

MEDIUM 40

The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backup_options' and 'restore_options' function in all ve…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00384 Published 2025-01-26 No fix listed CWE-862

Vulnerabilities

Filters