Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

Vendor: TieLabs Clear all filters
TI-2026-70343 CVE-2026-42693 · GHSA-2wh6-8g66-rwmf

Reflected cross-site scripting in WordPress Jannah theme

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows Reflected XSS.This issue affects Jannah: from n/a before 7.6.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-10-10 Fixed in 7.6.8 CWE-79
TI-2026-20576 CVE-2026-25464 · GHSA-w2r9-p43q-3g65

WordPress Jannah theme <= 7.6.4 - Local File Inclusion vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00419 Published 2026-03-25 No fix listed CWE-98
TI-2025-39650 CVE-2025-64207 · GHSA-5gf2-cf4m-h828

WordPress Jannah theme <= 7.6.0 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00219 Published 2025-12-18 No fix listed CWE-79
TI-2025-39649 CVE-2025-64206 · GHSA-vjf3-755p-p4fr

WordPress Jannah theme <= 7.6.0 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2025-12-18 No fix listed CWE-502
TI-2025-39648 CVE-2025-64205 · GHSA-q23c-5fvr-w9pv

WordPress Jannah theme <= 7.6.0 - Local File Inclusion vulnerability

Priority MEDIUM 41

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00404 Published 2025-12-18 No fix listed CWE-98
TI-2025-39651 CVE-2025-64208 · GHSA-g57x-6757-m2v6

WordPress Jannah - Extensions plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-29 No fix listed CWE-79
TI-2025-39645 CVE-2025-64202 · GHSA-4527-g864-c7mh

WordPress Sahifa theme < 5.8.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00165 Published 2025-10-29 No fix listed CWE-79
TI-2025-33300 CVE-2025-53334 · GHSA-2m5j-jx9r-gpv2

WordPress Jannah Theme < 7.5.1 - Local File Inclusion Vulnerability

Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00527 Published 2025-08-28 No fix listed CWE-98
TI-2021-06699 CVE-2021-24407 · GHSA-f4fp-w82v-76w6

Jannah < 5.4.5 - Reflected Cross-Site Scripting (XSS)

Priority LOW 32

The Jannah WordPress theme before 5.4.5 did not properly sanitize the 'query' POST parameter in its tie_ajax_search AJAX action, leading to a Reflected Cross-site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02591 Published 2021-07-06 Fixed in 5.4.5 CWE-79
TI-2021-06656 CVE-2021-24364 · GHSA-3wxv-m6v8-9vx3

Jannah < 5.4.4 - Reflected Cross-Site Scripting (XSS)

Priority LOW 31

The Jannah WordPress theme before 5.4.4 did not properly sanitize the options JSON parameter in its tie_get_user_weather AJAX action before outputting it back in the page, leading to a Reflected Cross-Site Scripting (XSS…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01975 Published 2021-06-21 Fixed in 5.4.4 CWE-79