Lucene search
+L

125 matches found

NVD
NVD
•added 2025/06/06 1:15 p.m.•15 views

CVE-2025-30990

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

5.4CVSS0.00252EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/06 12:54 p.m.•11 views

CVE-2025-30990 WordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

4.3CVSS5.8AI score0.00252EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/06 12:54 p.m.•23 views

CVE-2025-30990 WordPress ThemeHunk plugin <= 1.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

4.3CVSS0.00252EPSS
SaveExploits0References1
CVE
CVE
•added 2025/06/06 12:54 p.m.•56 views

CVE-2025-30990

CVE-2025-30990 pertains to ThemeHunk WordPress plugin where Missing Authorization arises from misconfigured access control in ThemeHunk, affecting versions up to 1.1.1. The vulnerability enables an unauthorized actor to exploit access control, per the Red Hat advisory describing Missing Authoriza...

5.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•3 views

CVE-2025-30990: Missing Authorization

Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ThemeHunk: from n/a through = 1.2.0...

5.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/06 12:00 a.m.•13 views

PT-2025-24189

Name of the Vulnerable Software and Affected Versions ThemeHunk versions 1.1.1 and earlier Description The issue is related to missing authorization, allowing exploitation of incorrectly configured access control security levels. Recommendations For ThemeHunk versions 1.1.1 and earlier, update to...

5.4CVSS4.9AI score0.00252EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/06/06 12:00 a.m.•16 views

WordPress plugin ThemeHunk 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS4.9AI score0.00252EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/06/05 1:19 a.m.•19 views

WordPress ThemeHunk plugin <= 1.1.2 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by domiee13 in WordPress Plugin ThemeHunk versions = 1.1.2...

5.4CVSS6.7AI score0.00252EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:21 a.m.•15 views

CVE-2024-44049

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg Blocks: from n/a through = 1.2.8...

6.5CVSS5.9AI score0.0026EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 5:02 a.m.•19 views

CVE-2023-27431

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk Big Store theme = 1.9.3 versions...

8.8CVSS7.1AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:10 a.m.•9 views

CVE-2023-28688

Cross-Site Request Forgery CSRF vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through 1.2.7...

5.4CVSS7AI score0.00202EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:39 a.m.•10 views

CVE-2022-40218

Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4...

6.5CVSS7AI score0.00486EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/03/29 12:10 p.m.•31 views

CVE-2025-30881

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...

5.4CVSS7.2AI score0.00355EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/27 3:15 p.m.•14 views

CVE-2025-22644

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce allows Stored XSS.This issue affects Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce: from n/a through 1.2.1...

6.5CVSS7.3AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/27 3:15 p.m.•12 views

CVE-2025-22644

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce vayu-blocks allows Stored XSS.This issue affects Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce: from n/a through =...

6.5CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/27 3:11 p.m.•9 views

CVE-2025-22644 WordPress Vayu Blocks – Gutenberg Blocks plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce allows Stored XSS.This issue affects Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce: from n/a through 1.2.1...

6.5CVSS6.5AI score0.00251EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/27 3:11 p.m.•64 views

CVE-2025-22644

CVE-2025-22644 is a stored XSS in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce. Affected versions: 1.2.1 and earlier. CVSS 3.1: 6.5 (Network, Low integrity/availability impact; User interaction required; Privileges: Low). Exploitation status is not detailed in the provided...

6.5CVSS7.2AI score0.00251EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2025/03/27 11:15 a.m.•51 views

CVE-2025-30881

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...

5.4CVSS0.00355EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2025/03/27 11:15 a.m.•7 views

CVE-2025-30881

Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through = 2.0.8...

5.4CVSS7.2AI score0.00355EPSS
SaveExploits0References3
OSV
OSV
•added 2025/03/27 11:15 a.m.•11 views

CVE-2025-30881

Missing Authorization vulnerability in ThemeHunk Big Store allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Big Store: from n/a through 2.0.8...

5.4CVSS5.8AI score0.00355EPSS
SaveExploits0References1
Rows per page
Query Builder