5 matches found
WordPress Total theme <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Osvaldo Noe Gonzalez Del Rio Os - krei.dev | ogbuilders.io in WordPress Theme Total versions = 2.2.1...
CVE-2023-27456 WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation
Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19...
CVE-2023-27456 WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation
Missing Authorization vulnerability in hashthemes Total total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through = 2.1.19...
WordPress Total Theme <= 2.1.59 is vulnerable to Broken Access Control
Software Total Type Theme Vulnerable versions = 2.1.59 Fixed in 2.1.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1771 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 28437cd16373 Credits Krzysztof Zając Required privilege...
WordPress Total Theme <= 2.1.19 is vulnerable to Broken Authentication
Software Total Type Theme Vulnerable versions = 2.1.19 Fixed in 2.1.20 OWASP Top 10 A2: Broken Authentication Classification Broken Authentication CVE CVE-2023-27456 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 9519255e632c Credits Dave Jong Patchstack Required...