Vulnerabilities in themeglow
6 resultsVexday analysis
Themeglow possui 6 vulnerabilidades registradas, com 1 classificada como crítica, mas nenhuma sob exploração ativa conhecida. A fraqueza dominante está relacionada a controles de acesso inadequados (CWE-862), indicando falhas na autorização. Não há vulnerabilidades recentes (últimos 90 dias), sugerindo que o risco atual é moderado e estável.
CVE-2024-43243CRITICALWordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2025-31833MEDIUMWordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.5%CVE-2025-31834MEDIUMWordPress JobBoard Job listing plugin Plugin <= 1.2.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-5117HIGHProperty 1.0.5 - 1.0.6 - Missing Authorization to Authenticated (Author+) Privilege Escalation via property_package_user_role Metadata in PayPal RegistrationEPSS 0.4%CVE-2025-68855MEDIUMWordPress JobBoard Job listing plugin <= 1.2.8 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2025-24563HIGHWordPress Cleanup – Directory Listing & Classifieds plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%