WordPress Monalisa premium theme <= 2.0.9 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Monalisa premium theme versions = 2.0.9. Solution Update the WordPress Monalisa premium theme to the latest available version at least 2.1.3...

WordPress Careerfy premium theme <= 4.0.0 - Multiple Cross-Site Scripting (XSS) vulnerabilities

Multiple Cross-Site Scripting XSS vulnerabilities discovered by m0ze in WordPress Careerfy premium theme versions = 4.0.0. Solution Update the WordPress Careerfy premium theme to the latest available version at least 4.1.0...

WordPress CarrerUp premium theme <= 2.3.0 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarrerUp premium theme versions = 2.3.0. Solution Update the WordPress CarrerUp premium theme to the latest available version at least 2.3.1...

WordPress Nexos premium theme <= 1.7 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress Nexos premium theme versions = 1.7. Solution Update the WordPress Nexos premium theme to the latest available version at least 1.8...

WordPress CityBook premium theme <= 2.4.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability found by Vlad Vector in WordPress CityBook premium theme versions = 2.4.3. Solution Update the WordPress CityBook premium theme to the latest available version at least 2.4.4...

WordPress Avada premium theme <= 6.2.2 - Arbitrary Post Creation, Edition and Deletion vulnerability

Arbitrary Post Creation, Edition, and Deletion vulnerability discovered by NinTechNet in WordPress Avada premium theme versions = 6.2.2. Solution Update the WordPress Avada premium theme to the latest available version at least 6.2.3...

WordPress Xenon premium theme <= 1.3 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability discovered by Khaled Nassar in WordPress Xenon premium theme versions = 1.3. Solution No patched version is available...

WordPress Yottis premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by WordFence in WordPress Yottis premium theme versions = 1.0. Solution Update the WordPress Yottis premium theme to the latest available version at least 1.0.1...

WordPress Chit Club premium theme <= 1.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by WordFence in WordPress Chit Club premium theme versions = 1.0. Solution Update the WordPress Chit Club premium theme to the latest available version at least 1.0.1...

WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (registration form & user profile)

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...

WordPress CarSpot premium theme <= 2.2.2 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability (ad post)

Authenticated Persistent Cross-Site Scripting XSS vulnerability ad post vulnerability discovered by m0ze in WordPress CarSpot premium theme versions = 2.2.2. Solution Update the WordPress CarSpot premium theme to the latest available version at least 2.2.3...

WordPress ListingPro premium theme <= 2.5.3 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress ListingPro premium theme versions = 2.5.3. Solution Update the WordPress ListingPro premium theme to the latest available version at least 2.5.4...

WordPress Real Estate 7 premium theme <= 2.9.4 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by m0ze in WordPress Real Estate 7 premium theme versions = 2.9.4. Solution Update the WordPress Real Estate 7 premium theme to the latest available version at least 2.9.5...

WordPress Real Estate 7 premium theme <= 2.9.4 - Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered by m0ze in WordPress Real Estate 7 premium theme versions = 2.9.4. Solution Update the WordPress Real Estate 7 premium theme to the latest available version at least 2.9.5...

WordPress EasyBook premium theme <= 1.2.1 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

Unauthenticated Reflected Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress EasyBook premium theme <= 1.2.1 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by m0ze in WordPress EasyBook premium theme versions = 1.2.1. Solution Update the WordPress EasyBook premium theme to the latest available version at least 1.2.2...

WordPress CityBook premium theme <= 2.3.3 - Multiple vulnerabilities

Multiple vulnerabilities found by m0ze in WordPress CityBook premium theme versions = 2.3.3. Solution Update the WordPress CityBook premium theme to the latest available version at least 2.3.4...

WordPress TownHub premium theme <= 1.0.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

WordPress TownHub premium theme <= 1.0.5 - Unauthenticated Cross-Site Scripting (XSS) vulnerability

Unauthenticated Cross-Site Scripting XSS vulnerability found by m0ze in WordPress TownHub premium theme versions = 1.0.5. Solution Update the WordPress TownHub premium theme to the latest available version at least 1.0.6...

WordPress ListingPro premium theme <= 2.0.14.2 - Reflected & Persistent Cross-Site Scripting (XSS) vulnerability

Reflected & Persistent Cross-Site Scripting XSS vulnerability found by SUBVΞRSΛ in WordPress ListingPro premium theme versions = 2.0.14.2. Solution Update the WordPress ListingPro theme to the latest available version at least 2.0.14.5...