21 matches found
CVE-2023-29100
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dream-Theme The7 plugin = 11.6.0 versions...
EUVD-2025-201956
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dream-Theme The7 dt-the7 allows DOM-Based XSS.This issue affects The7: from n/a through = 12.8.0.2...
CVE-2025-63076
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dream-Theme The7 Elements dt-the7-core allows PHP Local File Inclusion.This issue affects The7 Elements: from n/a through = 2.7.11...
CVE-2025-63074
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dream-Theme The7 dt-the7 allows PHP Local File Inclusion.This issue affects The7: from n/a through 12.8.1.1...
CVE-2025-63073
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dream-Theme The7 dt-the7 allows DOM-Based XSS.This issue affects The7: from n/a through 12.9.0...
CVE-2025-63074 WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dream-Theme The7 dt-the7 allows PHP Local File Inclusion.This issue affects The7: from n/a through 12.8.1.1...
CVE-2025-63076: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dream-Theme The7 Elements dt-the7-core allows PHP Local File Inclusion.This issue affects The7 Elements: from n/a through = 2.7.11...
CVE-2025-63074: Improper Control of Filename for Include/Require Statement in PHP Program
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Dream-Theme The7 dt-the7 allows PHP Local File Inclusion.This issue affects The7: from n/a through 12.8.1.1...
CVE-2025-63073: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dream-Theme The7 dt-the7 allows DOM-Based XSS.This issue affects The7: from n/a through 12.9.0...
EUVD-2023-36391
Malicious code in bioql PyPI...
CVE-2023-32123
Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...
CVE-2023-32123
Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...
CVE-2023-32123
Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...
CVE-2023-32123
The CVE-2023-32123 CSRF vulnerability affects WordPress theme The7 (
CVE-2023-32123 WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...
PT-2023-23630
Name of the Vulnerable Software and Affected Versions Dream-Theme The7 versions prior to 11.7.4 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. Recommendations For versions prior to 11.7.4, update to version 11.7.4 or later to resolve the issue...
CVE-2023-32123: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in Dream-Theme The7 allows Stored XSS.This issue affects The7: from n/a through 11.7.3...
CVE-2023-29100
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Dream-Theme The7 plugin = 11.6.0 versions...
