CVE-2020-36837

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to an authentication bypass in versions 1.3.4 through 1.6.1 . The root cause is a missing capability check on the reset_wizard_actions function. This flaw allows an authenticated attacker to reset the WordPress database; subsequently...

WordPress plugin ThemeGrill Demo Importer has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

CVE-2020-36837: Missing Authorization

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the resetwizardactions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there ...

VulnCheck KEV: CVE-2020-36837

The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the resetwizardactions function in versions 1.3.4 through 1.6.1. This makes it possible for authenticated attackers to reset the WordPress database. After which, if there ...

PT-2024-10847

Name of the Vulnerable Software and Affected Versions ThemeGrill Demo Importer plugin for WordPress versions 1.3.4 through 1.6.1 Description The ThemeGrill Demo Importer plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the reset wizard actions...

CVE-2024-39629

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.2...

CVE-2024-39629

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.2...

CVE-2024-39629 WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.2...

CVE-2024-39629

CVE-2024-39629 is a Stored XSS vulnerability in ThemeGrill Himalayas for WordPress, affecting Himalayas versions up to 1.3.2. The issue arises from improper neutralization of input during web page generation, enabling cross-site scripting. Public sources describe the vulnerability as a Cross-Site...

CVE-2024-39629: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.2...

PT-2024-28565 · Themegrill · Themegrill Himalayas

Name of the Vulnerable Software and Affected Versions: ThemeGrill Himalayas versions 1.3.2 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations: For...

CVE-2024-37432

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Esteem allows Stored XSS.This issue affects Esteem: from n/a through 1.5.0...

CVE-2024-37432

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Esteem allows Stored XSS.This issue affects Esteem: from n/a through 1.5.0...

CVE-2024-37432

A Stored Cross-Site Scripting (XSS) vulnerability exists in the ThemeGrill Esteem WordPress theme, affecting versions from the beginning of its lifecycle through version 1.5.0 . The flaw is caused by the Improper Neutralization of Input During Web Page Generation , which allows an attacker to inj...

CVE-2024-37432: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in ThemeGrill Esteem allows Stored XSS.This issue affects Esteem: from n/a through 1.5.0...

PT-2024-27548

Name of the Vulnerable Software and Affected Versions ThemeGrill Esteem versions 1.5.0 and earlier Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendations For...

CVE-2024-34571

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.0...

CVE-2024-34571

CVE-2024-34571 corresponds to ThemeGrill Himalayas, a WordPress theme. Public records show an Authenticated Stored XSS in Himalayas up to version 1.3.0 due to improper input neutralization during web page generation. The risk is described as stored XSS with authenticated access (Contributor+). Re...

CVE-2024-34571 WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.0...

CVE-2024-34571: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.0...