Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: SeventhQueen Clear all filters
TI-2026-21831 CVE-2026-27417 · GHSA-f47m-7v73-6xf6

WordPress Sweet Date theme < 4.0.1 - PHP Object Injection vulnerability

Priority MEDIUM 43

Deserialization of Untrusted Data vulnerability in SeventhQueen Sweet Date sweetdate allows Object Injection.This issue affects Sweet Date: from n/a through < 4.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00446 Published 2026-03-05 No fix listed CWE-502
TI-2025-11368 CVE-2025-12391 · GHSA-p977-vf96-vh9m

Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update

Priority LOW 24

The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_optin_optout() function in all versions up to, and including, 1.5.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00289 Published 2025-11-18 No fix listed CWE-862
TI-2025-39796 CVE-2025-64363 · GHSA-63x7-86mp-j45m

WordPress Kleo theme < 5.5.0 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in SeventhQueen Kleo kleo allows PHP Local File Inclusion.This issue affects Kleo: from n/a through <…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00418 Published 2025-10-31 No fix listed CWE-98
TI-2025-39795 CVE-2025-64362 · GHSA-5869-fm6w-9qxm

WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through < 5.5.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-31 No fix listed CWE-79
TI-2024-11224 CVE-2024-12102 · GHSA-qm65-g2fh-9p2w

Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure

Priority LOW 20

The Typer Core plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.6 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00319 Published 2025-01-30 No fix listed CWE-639