Vulnerabilities in themes4wp

6 results

Vexday analysis

Themes4wp apresenta 3 vulnerabilidades catalogadas, nenhuma delas sob exploração ativa ou com severidade crítica. A fraqueza predominante é cross-site request forgery (CWE-352), típica de plugins WordPress, e não há registros de novas vulnerabilidades nos últimos 90 dias, indicando risco moderado e estável.

CVE-2024-9353MEDIUMPopularis Extra <= 1.2.6 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-10795MEDIUMPopularis Extra <= 1.2.7 - Authenticated (Contributor+) Post DisclosureEPSS 0.3%CVE-2025-26867MEDIUMWordPress Bulk theme <= 1.0.11 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-50470MEDIUMWordPress Themes4WP YouTube External Subtitles plugin <= 1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-38763MEDIUMWordPress Popularis Verse theme <= 1.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2026-25422MEDIUMWordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%