Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Themeqx Clear all filters
TI-2025-22902 CVE-2025-31765 · GHSA-vg87-mcfx-5m8m

WordPress GDPR Cookie Notice plugin <= 1.2.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in themeqx GDPR Cookie Notice gdpr-cookie-notice allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GDPR Cookie Notice: from n/a through <= 1.2.…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00455 Published 2025-04-01 No fix listed CWE-862
TI-2024-03345 CVE-2024-3590 · GHSA-hpj4-v4gg-8xfh

LetterPress <= 1.2.2 - Subscriber Deletion via CSRF

Priority MEDIUM 60

The LetterPress WordPress plugin through 1.2.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks, such as delete arbitrary subscribers

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00232 Published 2024-05-09 No fix listed CWE-352