Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: NsThemes Clear all filters
TI-2026-07651 CVE-2026-8707 · GHSA-528r-cr6g-9874

NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF

Priority LOW 27

The NS Product icon badge plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00211 Published 2026-05-27 No fix listed CWE-79
TI-2025-17226 CVE-2025-23459 · GHSA-qcw6-3cfv-2mjg

WordPress NS Simple Intro Loader plugin <= 2.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NsThemes NS Simple Intro Loader ns-simple-intro-loader allows Reflected XSS.This issue affects NS Simple Intro Loader:…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0037 Published 2025-03-26 No fix listed CWE-79
TI-2022-00888 CVE-2022-0989 · GHSA-x7rm-w2h5-52qj

NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality

Priority LOW 35

An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2022-04-11 No fix listed CWE-80