Vulnerabilidades em detheme

13 resultados
Análise Vexday

O detheme apresenta um perfil de risco contido com 6 CVEs catalogadas, nenhuma atualmente sob exploração ativa ou com severidade crítica. A fraqueza predominante é Cross-Site Scripting (CWE-79), típica de componentes web, sem novos lançamentos nos últimos 90 dias, indicando que o risco é consolidado e não reflete ameaças emergentes.

CVE-2025-46460CRITICALWordPress Easy Guide plugin <= 1.0.0 - SQL Injection VulnerabilityEPSS 0.4%CVE-2024-4374MEDIUMDethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.4%CVE-2024-5418MEDIUMDethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems AttributeEPSS 0.3%CVE-2024-32508MEDIUMWordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-6283MEDIUMDethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery WidgetEPSS 0.3%CVE-2025-32260MEDIUMWordPress DethemeKit For Elementor plugin <= 2.1.10 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-0661MEDIUMDethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post DisclosureEPSS 0.3%CVE-2024-47632MEDIUMWordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-1526MEDIUMDethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-34575MEDIUMWordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-13644MEDIUMDethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery WidgetEPSS 0.2%CVE-2025-57995MEDIUMWordPress DethemeKit For Elementor Plugin <= 2.1.10 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-26772MEDIUMWordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%