Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: presscustomizr Clear all filters
TI-2020-18924 CVE-2020-36755 · GHSA-7gx8-jvcv-jmvj

Customizr <= 4.3.0 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Customizr theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.3.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-10-20 No fix listed CWE-352
TI-2020-18922 CVE-2020-36753 · GHSA-7q52-xpr7-cj38

Hueman <= 3.6.3 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Hueman theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.6.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-10-20 No fix listed CWE-352
TI-2022-04380 CVE-2022-4784 · GHSA-v7rm-4q4v-g333

Hueman Addons <= 2.3.3 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Hueman Addons WordPress plugin through 2.3.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00471 Published 2023-02-21 No fix listed CWE-79
TI-2022-00243 CVE-2022-0314 · GHSA-r4qm-jcjp-x8c6

Nimble Page Builder < 3.2.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Nimble Page Builder WordPress plugin before 3.2.2 does not sanitise and escape the preview-level-guid parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-04-11 Fixed in 3.2.2 CWE-79