Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: themehorse Clear all filters
TI-2024-33867 CVE-2024-50434 · GHSA-6qwf-f7j5-fhq9

WordPress NewsCard theme <= 1.3 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse NewsCard newscard.This issue affects NewsCard: from n/a through <= 1.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00483 Published 2024-10-28 No fix listed CWE-98
TI-2024-33868 CVE-2024-50435 · GHSA-4f9m-g9pv-r46f

WordPress Meta News theme <= 1.1.7 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Meta News meta-news.This issue affects Meta News: from n/a through <= 1.1.7.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00497 Published 2024-10-28 No fix listed CWE-98
TI-2024-33869 CVE-2024-50436 · GHSA-m324-6rmq-j3r4

WordPress Clean Retina theme <= 3.0.6 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Clean Retina clean-retina.This issue affects Clean Retina: from n/a through <= 3.0.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00497 Published 2024-10-28 No fix listed CWE-98
TI-2024-33187 CVE-2024-49701 · GHSA-h53j-2x3f-48pf

WordPress Mags theme <= 1.1.6 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehorse Mags mags.This issue affects Mags: from n/a through <= 1.1.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00497 Published 2024-10-23 No fix listed CWE-98
TI-2024-23627 CVE-2024-35758 · GHSA-328q-x484-qwc2

WordPress Interface theme <= 3.1.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Theme Horse Interface allows Stored XSS.This issue affects Interface: from n/a through 3.1.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-06-21 No fix listed CWE-79
TI-2024-22124 CVE-2024-33537 · GHSA-g7qj-fx7v-pm5j

WordPress WP Portfolio theme <= 2.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme Horse WP Portfolio allows Stored XSS.This issue affects WP Portfolio: from n/a through 2.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00351 Published 2024-04-29 No fix listed CWE-79