Vulnerabilities

TI-2025-36564 CVE-2025-58920 · GHSA-whm2-488f-jvqp

WordPress Cerato theme <= 2.2.18 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zootemplate Cerato cerato allows Reflected XSS.This issue affects Cerato: from n/a through <= 2.2.18.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00199 Published 2026-04-10 No fix listed CWE-79

TI-2024-09593 CVE-2024-10357 · GHSA-3mqv-m62x-fm9w

Information disclosure in zootemplate Clever Addons for Elementor

LOW 20

The Clever Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.1 via the getTemplateContent function in src/widgets/class-clever-widget-base…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0043 Published 2024-10-26 No fix listed CWE-200

Vulnerabilities

Filters

WordPress Cerato theme <= 2.2.18 - Reflected Cross Site Scripting (XSS) vulnerability

Information disclosure in zootemplate Clever Addons for Elementor