Vulnerabilities in wpweaver
9 resultsCVE-2026-10035MEDIUMTurnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object InjectionEPSS 0.7%CVE-2023-1403MEDIUMWeaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.5%CVE-2023-1404MEDIUMWeaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display NameEPSS 0.5%CVE-2024-12221MEDIUMTurnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce ParameterEPSS 0.4%CVE-2023-6990MEDIUMWeaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-4939MEDIUMWeaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div ShortcodeEPSS 0.3%CVE-2025-22267MEDIUMWordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-2121MEDIUMWeaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget SettingEPSS 0.2%CVE-2026-54870MEDIUMWordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%