Vulnerabilidades em mythemeshop
13 resultadosAnálise Vexday
MythemeShop possui 4 vulnerabilidades catalogadas, nenhuma atualmente sob exploração ativa, com 1 divulgação recente nos últimos 90 dias. O padrão de risco é baixo, concentrado em falhas de autorização (CWE-862), sem gravidade crítica identificada, sugerindo exposição moderada e controlável.
CVE-2025-2158HIGHWordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom FieldsEPSS 0.8%CVE-2021-36844LOWWordPress WP Subscribe plugin <= 1.2.12 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2023-23896MEDIUMWordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access ControlEPSS 0.5%CVE-2021-36829MEDIUMWordPress Launcher: Coming Soon & Maintenance Mode plugin <= 1.0.11 - Authenticated Stored Cross-Site Scripting (XSS) vulnerabilityEPSS 0.5%CVE-2023-30472HIGHWordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2025-8423MEDIUMMy WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and DeletionEPSS 0.3%CVE-2023-28495MEDIUMWordPress WP Shortcode by MyThemeShop Plugin <= 1.4.16 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-8425HIGHMy WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options UpdateEPSS 0.3%CVE-2025-46482MEDIUMWordPress WP Quiz plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-9635MEDIUMWP Shortcode by MyThemeShop <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode AttributeEPSS 0.2%CVE-2026-24522MEDIUMWordPress WP Subscribe plugin <= 1.2.16 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2024-37938MEDIUMWordPress SociallyViral theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2024-37452MEDIUMWordPress Schema Lite theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%