CVE-2022-45356

The CVE-2022-45356 entry concerns WordPress BeTheme/Muffingroup Betheme with a Missing Authorization vulnerability that affects Betheme up to version 26.6.1. The connected sources identify a Broken Access Control flaw in Betheme (≤ 26.6.1), with remediation guidance to update to a later version. ...

CVE-2022-45356 WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

CVE-2022-45351

The CVE-2022-45351 entry concerns Muffingroup BeTheme (WordPress BeTheme premium theme) with a Missing Authorization/Broken Access Control vulnerability identified through Betheme versions up to 26.6.1. Public references from Patchstack and CVE listings align on the issue: unauthorized access tha...

CVE-2022-45349

CVE-2022-45349 concerns Muffingroup Betheme (WordPress theme) with a Missing Authorization/Broken Access Control vulnerability affecting versions up to 26.6.1. Multiple connected sources (Patchstack, PT Security, Red Hat, CVE records) indicate unauthenticated or low-privilege access could enable ...

PT-2024-11705 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability in Muffingroup Betheme. Recommendations: For versions through 26.6.1, update to a version later than 26.6.1 to resolve the...

PT-2024-11703 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11702 · Muffingroup · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability affects Muffingroup Betheme, allowing unauthorized access. Recommendations: For versions through 26.6.1...

PT-2024-11701 · Muffin · Muffingroup Betheme

Name of the Vulnerable Software and Affected Versions: Muffingroup Betheme versions through 26.6.1 Description: The issue is related to a Missing Authorization vulnerability. This vulnerability could allow unauthorized access. The estimated number of potentially affected devices is not specified...

CVE-2023-29101

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Muffingroup Betheme theme = 26.7.5 versions...

CVE-2023-29101

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Muffingroup Betheme theme = 26.7.5 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Muffingroup Betheme theme = 26.7.5 versions...

CVE-2023-29101

The CVE-2023-29101 entry covers Betheme (Muffingroup Betheme) WordPress theme versions ≤ 26.7.5 with an unauthenticated Reflected XSS due to insufficient input sanitization/escaping. Impact per sources is XSS with low impact on confidentiality/integrity and no explicit exploit details in the docs...

VulnCheck KEV: CVE-2022-45363

Auth. subscriber+ Stored Cross-Site Scripting XSS in Muffingroup Betheme theme = 26.6.1 on WordPress...

VulnCheck KEV: CVE-2022-45352

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

WordPress Muffingroup Betheme theme plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Muffingroup Betheme theme plugin 26.6.1 and earlier versions have a cross-site scripting...

VulnCheck KEV: CVE-2022-45356

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1...

CVE-2022-45363

Auth. subscriber+ Stored Cross-Site Scripting XSS in Muffingroup Betheme theme = 26.6.1 on WordPress...

Cross site scripting

Auth. subscriber+ Stored Cross-Site Scripting XSS in Muffingroup Betheme theme = 26.6.1 on WordPress...

CVE-2022-45363

Auth. subscriber+ Stored Cross-Site Scripting XSS in Muffingroup Betheme theme = 26.6.1 on WordPress...

CVE-2022-45363

Affected software: Muffingroup Betheme theme for WordPress (versions up to 26.6.1). The issue is a Stored Cross‑Site Scripting (XSS) vulnerability in subscriber+ context, caused by insufficient sanitization/escaping of user input in the theme. Impact as stated: XSS could be triggered by authentic...