Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: WooThemes Clear all filters
TI-2019-16193 CVE-2019-25779 · GHSA-57gp-6fh6-hf38

Path traversal in WooThemes Diarise exposes local files

Priority HIGH 77

WooThemes Diarise through 1.5.9 contains a file read vulnerability that allows unauthenticated attackers to read arbitrary files through the calendar parameter of download.php.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00447 Published 2026-10-22 No fix listed CWE-22
TI-2014-05191 CVE-2014-6313 · GHSA-wq8m-rc75-vf5c

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for…

Priority LOW 24

Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the range parameter on the wc-reports page to wp-admin/admi…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02023 Published 2014-10-14 No fix listed CWE-79