Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.3 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS5.4AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.2 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.1 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

5.9AI score0.00064EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.1 views

CVE-2025-68839

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS5.3AI score0.00064EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.6 views

CVE-2025-68839

CVE-2025-68839 is a WordPress plugin vulnerability in the Easy Theme Options plugin (Remi Corson) causing a Reflected XSS during web page generation. Affected versions are reported as

7.1CVSS5.4AI score0.00064EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.13 views

CVE-2025-68839 WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Remi Corson Easy Theme Options easy-theme-options allows Reflected XSS.This issue affects Easy Theme Options: from n/a through = 1.0...

7.1CVSS0.00064EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.2 views

WordPress plugin Easy Theme Options has a cross-site scripting vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

7.1CVSS5.7AI score0.00064EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.2 views

PT-2026-4085

Name of the Vulnerable Software and Affected Versions Easy Theme Options versions prior to 1.1 Description The software contains a flaw due to improper handling of user-supplied data when creating web pages, which can lead to Reflected Cross-site Scripting XSS. This means that malicious code can ...

5.4AI score0.00064EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/20 7:56 a.m.3 views

WordPress Easy Theme Options plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Skalucy in WordPress Plugin Easy Theme Options versions = 1.0...

7.1CVSS5.3AI score0.00064EPSS
Exploits0Affected Software1
NVD
NVD
added 2025/12/13 4:16 p.m.2 views

CVE-2025-14367

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the etoimportsettings function. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

5.3CVSS0.00036EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/12/13 4:31 a.m.17 views

CVE-2025-14367 Easy Theme Options <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Import

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the etoimportsettings function. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

5.3CVSS0.00036EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/13 4:31 a.m.1 views

CVE-2025-14367 Easy Theme Options <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Import

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the etoimportsettings function. This makes it possible for authenticated attackers, with Subscriber-level access and above, ...

5.3CVSS5.5AI score0.00036EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/13 12:0 a.m.2 views

PT-2025-51067

The Easy Theme Options plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.0. This is due to missing authorization checks in the eto import settings function. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.3CVSS5.9AI score0.00036EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/12/13 12:0 a.m.1 views

WordPress plugin Easy Theme Options 安全漏洞

...

5.3CVSS5.8AI score0.00036EPSS
Exploits0References4
Rows per page
Query Builder