Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: theme funda Clear all filters
TI-2025-40639 CVE-2025-66114 · GHSA-rf55-6qxf-873f

WordPress Show Variations as Single Products Woocommerce plugin <= 2.0 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in theme funda Show Variations as Single Products Woocommerce woo-show-single-variations-shop-category allows Exploiting Incorrectly Configured Access Control Security Levels.This issu…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00218 Published 2025-11-21 No fix listed CWE-862
TI-2025-22126 CVE-2025-30856 · GHSA-gh9x-wq33-hmvv

WordPress Custom Field For WP Job Manager plugin <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Cross Site Request Forgery.This issue affects Custom Field For WP Job Manager: from n/…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00207 Published 2025-03-27 No fix listed CWE-352
TI-2025-18359 CVE-2025-24642 · GHSA-82ch-63xf-6pr3

WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in theme funda Setup Default Featured Image setup-default-feature-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Setup Default Feature…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00413 Published 2025-02-03 No fix listed CWE-862
TI-2025-16690 CVE-2025-22809 · GHSA-wrc6-jvcr-2g5p

WordPress PDF Catalog Woocommerce plugin <= 2.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda PDF Catalog Woocommerce pdf-catalog-woocommerce allows DOM-Based XSS.This issue affects PDF Catalog Woocom…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-01-09 No fix listed CWE-79
TI-2025-16198 CVE-2025-22294 · GHSA-6vm3-2q2x-wf88

WordPress Custom Field For WP Job Manager plugin <= 1.3 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 32

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theme funda Custom Field For WP Job Manager custom-field-for-wp-job-manager allows Reflected XSS.This issue affects Cu…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00445 Published 2025-01-07 No fix listed CWE-79