Vulnerabilities in liquidthemes
11 resultsVexday analysis
Liquidthemes apresenta apenas 1 vulnerabilidade registrada na base sem críticas de CVSS, nenhuma sob ataque ativo no momento. A fraqueza identificada (CWE-73, uso impróprio de entrada) não representa risco iminente, e a ausência de publicações recentes indica que a vulnerabilidade não é contemporânea.
CVE-2025-1093CRITICALAIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_imageEPSS 1.0%CVE-2025-13380MEDIUMAI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File ReadEPSS 0.5%CVE-2025-26927CRITICALWordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-65582HIGHWordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-68065HIGHWordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-32560HIGHWordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-30933CRITICALWordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload VulnerabilityEPSS 0.3%CVE-2026-32561HIGHWordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-81769HIGHWordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-0951MEDIUMLiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins DeactivatedEPSS 0.2%CVE-2026-25460MEDIUMWordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerabilityEPSS 0.2%