Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: TeconceTheme Clear all filters
TI-2025-42809 CVE-2025-69366 · GHSA-2cv8-fr2g-g66g

WordPress Emerce Core plugin <= 1.8 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00432 Published 2026-02-20 No fix listed CWE-89
TI-2025-42808 CVE-2025-69365 · GHSA-mhqr-8rx2-jw82

WordPress Uroan Core plugin <= 1.4.4 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42753 CVE-2025-69310 · GHSA-rmj8-x3h3-24rh

WordPress Woodly Core plugin <= 1.4 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42752 CVE-2025-69309 · GHSA-gxg3-7vjc-h392

WordPress Saasplate Core plugin <= 1.2.8 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a thro…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42751 CVE-2025-69308 · GHSA-pxxq-rvgm-p9rp

WordPress Nestbyte Core plugin <= 1.2 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42750 CVE-2025-69307 · GHSA-536p-mw62-6cm4

WordPress Medinik Core plugin <= 1.3.6 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <=…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42749 CVE-2025-69306 · GHSA-r5c8-59gv-v4x8

WordPress Electio Core plugin <= 1.4 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <=…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00329 Published 2026-02-20 No fix listed CWE-89
TI-2025-42748 CVE-2025-69305 · GHSA-37wf-f6wc-vqj8

WordPress Crete Core plugin <= 1.4.3 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00432 Published 2026-02-20 No fix listed CWE-89
TI-2025-42747 CVE-2025-69304 · GHSA-256m-r39j-gmcw

WordPress Allmart plugin <= 1.1 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00451 Published 2026-02-20 No fix listed CWE-89
TI-2025-42738 CVE-2025-69295 · GHSA-vhgp-3x24-vh98

WordPress Coven Core plugin <= 1.3 - SQL Injection vulnerability

Priority MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00476 Published 2026-02-20 No fix listed CWE-89
TI-2025-01348 CVE-2025-1565 · GHSA-9hgh-ww8v-4jw6

Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

Priority MEDIUM 40

The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00562 Published 2025-04-25 No fix listed CWE-22