Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: wpkoithemes Clear all filters
TI-2025-39717 CVE-2025-64274 · GHSA-qrx5-3cjw-hfhh

WordPress WPKoi Templates for Elementor plugin <= 3.4.4 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates fo…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00194 Published 2025-11-13 No fix listed CWE-862
TI-2025-35851 CVE-2025-57999 · GHSA-rqpg-jm7m-v8p4

WordPress WPKoi Templates for Elementor Plugin <= 3.4.3 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows DOM-Based XSS.This issue affects WPKoi…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-22 No fix listed CWE-79
TI-2024-37211 CVE-2024-56241 · GHSA-hwh4-8qxm-jfp4

WordPress WPKoi Templates for Elementor plugin <= 3.1.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Stored XSS.This issue affects WPKoi Tem…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00269 Published 2025-01-02 No fix listed CWE-79
TI-2024-04627 CVE-2024-4980 · GHSA-r6m4-7j2j-qxx2

Cross-site scripting in wpkoithemes WPKoi Templates for Elementor

Priority LOW 28

The WPKoi Templates for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'id', 'mixColor', 'backgroundColor', 'saveInCookies', and 'autoMatchOsTheme' parameters in all versions up to, and i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00342 Published 2024-05-22 No fix listed CWE-79