Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: pressmaximum Clear all filters
TI-2025-07936 CVE-2025-8669 · GHSA-mf7h-pjm6-28hp

Customify <= 0.4.11 - Cross-Site Request Forgery

Priority MEDIUM 53

The Customify theme for WordPress is vulnerable to Cross-Site Request Forgery in version 0.4.11.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00204 Published 2025-10-03 No fix listed CWE-352
TI-2025-19791 CVE-2025-26920 · GHSA-vqxg-8xhm-jf4p

WordPress Customify theme <= 0.4.8 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in pressmaximum Customify customify-theme allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Customify: from n/a through <= 0.4.8.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00271 Published 2025-05-19 No fix listed CWE-862
TI-2025-22127 CVE-2025-30857 · GHSA-6xxm-jx55-r734

WordPress Currency Switcher for WooCommerce plugin <= 0.0.7 - CSRF to Stored XSS vulnerability

Priority LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in PressMaximum Currency Switcher for WooCommerce currency-switcher-for-woocommerce allows Stored XSS.This issue affects Currency Switcher for WooCommerce: from n/a through…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00193 Published 2025-03-27 No fix listed CWE-352