Lucene search

Inkthemes Security Vulnerabilities

cve

CVE-2022-3750

The has a CSRF vulnerability that allows the deletion of a post without using a nonce or prompting for...

4.7CVSS

4.8AI Score

0.001EPSS

2022-11-21 11:15 AM

cve

CVE-2023-25447

Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3...

8.8CVSS

8.8AI Score

0.001EPSS

2023-05-22 03:15 PM

cve

CVE-2016-10961

The colorway theme before 3.4.2 for WordPress has XSS via the contactName...

6.1CVSS

6AI Score

0.001EPSS

2019-09-16 01:15 PM

cve

CVE-2022-1251

The Ask me WordPress theme before 6.8.4 does not perform nonce checks when processing POST requests to the Edit Profile page, allowing an attacker to trick a user to change their profile information by sending a crafted...

4.3CVSS

4.4AI Score

0.001EPSS

2022-08-22 03:15 PM