Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: silverks Clear all filters
TI-2026-70148 CVE-2026-17025 · GHSA-ccpv-ph2f-3cx3

Stored cross-site scripting in Graphene theme via profile fields

Priority LOW 28

The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and including, 2.9.4 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00182 Published 2026-10-10 Fix deferred CWE-79
TI-2024-01846 CVE-2024-1984 · GHSA-r7xx-h3jw-fq3j

Graphene <= 2.9.2 - Missing Authorization

Priority LOW 31

The Graphene theme for WordPress is vulnerable to unauthorized access of data via meta tag in all versions up to, and including, 2.9.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00523 Published 2024-04-09 No fix listed CWE-862