Vulnerabilidades em LiquidThemes
11 resultadosAnálise Vexday
LiquidThemes apresenta 6 vulnerabilidades catalogadas, com 3 delas críticas, concentradas principalmente em upload de arquivos desvalidado (CWE-434). Nenhuma das falhas está sob ataque ativo no momento e não há registros recentes de divulgação nos últimos 90 dias, indicando um risco contido mas estruturalmente relevante na validação de entrada.
CVE-2025-1093CRITICALAIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_imageEPSS 1.0%CVE-2025-13380MEDIUMAI Engine for WordPress: ChatGPT, GPT Content Generator <= 1.0.1 - Authenticated (Contributor+) Arbitrary File ReadEPSS 0.5%CVE-2025-26927CRITICALWordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerabilityEPSS 0.5%CVE-2026-65582HIGHWordPress AI Hub theme <= 1.3.10 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-68065HIGHWordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerabilityEPSS 0.4%CVE-2026-32560HIGHWordPress MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin <= 1.4 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-30933CRITICALWordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload VulnerabilityEPSS 0.3%CVE-2026-32561HIGHWordPress Booking Hub plugin <= 1.3.0 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-81769HIGHWordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2025-0951MEDIUMLiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins DeactivatedEPSS 0.2%CVE-2026-25460MEDIUMWordPress Ave Core plugin <= 2.9.1 - Broken Access Control vulnerabilityEPSS 0.2%