Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: NasaTheme Clear all filters
TI-2025-31185 CVE-2025-49070 · GHSA-wm95-f4rw-29qq

WordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability

Priority LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File Inclusion.This issue affects Elessi: from n/a t…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00691 Published 2025-07-04 No fix listed CWE-98
TI-2025-31788 CVE-2025-49873 · GHSA-9c2g-rcwg-w2m6

WordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi elessi-theme allows Reflected XSS.This issue affects Elessi: from n/a through <= 6.3.9.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-06-20 No fix listed CWE-79
TI-2025-31186 CVE-2025-49071 · GHSA-f4mc-8m8c-7xfc

WordPress Flozen < 1.5.1 - Arbitrary File Upload Vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in NasaTheme Flozen flozen-theme allows Upload a Web Shell to a Web Server.This issue affects Flozen: from n/a through < 1.5.1.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00524 Published 2025-06-17 No fix listed CWE-434
TI-2025-26250 CVE-2025-39508 · GHSA-6vq8-33g8-28r2

WordPress Nasa Core Plugin <= 6.4.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Reflected XSS.This issue affects Nasa Core: from n/a through <= 6.4.4.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0026 Published 2025-06-17 No fix listed CWE-79
TI-2025-31182 CVE-2025-49067 · GHSA-72mm-xf58-p22c

WordPress Nasa Core plugin < 6.4.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Nasa Core nasa-core allows Stored XSS.This issue affects Nasa Core: from n/a through < 6.4.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00218 Published 2025-06-06 No fix listed CWE-79
TI-2025-26248 CVE-2025-39506 · GHSA-2gf3-v8px-49h6

WordPress Nasa Core Plugin <= 6.3.2 - Local File Inclusion vulnerability

Priority LOW 39

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00818 Published 2025-05-23 No fix listed CWE-98
TI-2025-26249 CVE-2025-39507 · GHSA-wfj8-m9jg-h945

WordPress Nasa Core Plugin <= 6.4.4 - Local File Inclusion vulnerability

Priority MEDIUM 42

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Nasa Core nasa-core allows PHP Local File Inclusion.This issue affects Nasa Core: from n/…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00844 Published 2025-05-16 No fix listed CWE-98