Vulnerabilities

TI-2024-24722 CVE-2024-37207 · GHSA-q2v2-hj53-gvr2

WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Theme4Press Demo Awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Demo Awesome: from n/a through 1.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862

TI-2024-24721 CVE-2024-37206 · GHSA-mhr6-phpg-wmf5

WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme4Press Demo Awesome allows Reflected XSS.This issue affects Demo Awesome: from n/a through 1.0.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00272 Published 2024-07-22 No fix listed CWE-79

TI-2011-03405 CVE-2011-3852 · GHSA-x4v8-2mmv-m757

Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress…

LOW 26

Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03429 Published 2011-09-28 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Demo Awesome plugin <= 1.0.2 - Broken Access Control vulnerability

WordPress Demo Awesome plugin <= 1.0.1 - Reflected Cross Site Scripting (XSS) vulnerability

Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress…