Betheme Security Vulnerabilities and Issues — Betheme CVE List

Lucene search

MuffingroupBetheme

9 matches found

CVE•added 2024/06/19 12:15 p.m.•132 views

CVE-2023-47770

Missing Authorization vulnerability in Muffin Group Betheme.This issue affects Betheme: from n/a through 27.1.1.

7.6CVSS7.5AI score0.00114EPSS

CVE•added 2024/03/25 12:15 p.m.•80 views

CVE-2022-45352

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

5.4CVSS5.5AI score0.00043EPSS

CVE•added 2024/03/25 12:15 p.m.•80 views

CVE-2022-45356

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

8.8CVSS5.5AI score0.00086EPSS

CVE•added 2024/03/25 12:15 p.m.•61 views

CVE-2022-45349

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

4.3CVSS4.7AI score0.00061EPSS

CVE•added 2024/03/25 12:15 p.m.•61 views

CVE-2022-45351

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

5.4CVSS5.5AI score0.00044EPSS

CVE•added 2024/08/30 5:15 a.m.•46 views

CVE-2024-2694

The Betheme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 27.5.6 via deserialization of untrusted input of the 'mfn-page-items' post meta value. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a...

8.8CVSS8.8AI score0.04071EPSS

CVE•added 2024/08/30 5:15 a.m.•41 views

CVE-2024-3998

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 27.5.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

6.4CVSS5.6AI score0.00064EPSS

CVE•added 2024/06/19 1:15 p.m.•40 views

CVE-2023-39998

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 27.1.1.

8.2CVSS8.3AI score0.00098EPSS

CVE•added 2024/09/13 7:15 a.m.•39 views

CVE-2024-5567

The Betheme theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 27.5.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to ...

6.4CVSS5.6AI score0.00052EPSS