athemes records

9 published records for vendor athemes.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 33.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1

The weakness classes this vendor ships most often: where to look.

Attack profile

XSS 8

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2025-32158No exploit	WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerabilityathemes · athemes addons for elementor · CWE-98	High8.8	—	0.7%	Apr 10, 2025
21Monitor	CVE-2024-4036No exploit	Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scriptingathemes · sydney toolbox · CWE-79 XSS	Medium5.4	—	0.6%	May 2, 2024
21Monitor	CVE-2024-1447No exploit	Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scriptingathemes · sydney toolbox · CWE-79 XSS	Medium5.4	—	0.4%	Feb 28, 2024
21Monitor	CVE-2024-3208No exploit	Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Galleryathemes · sydney toolbox · CWE-79 XSS	Medium5.4	—	0.3%	Apr 9, 2024
21Monitor	CVE-2024-2936No exploit	Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _idathemes · sydney toolbox · CWE-79 XSS	Medium5.4	—	0.3%	Mar 29, 2024
21Monitor	CVE-2024-4473No exploit	Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widgetathemes · sydney toolbox · CWE-79 XSS	Medium5.4	—	0.2%	May 14, 2024
21Monitor	CVE-2024-51675No exploit	WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerabilityathemes · athemes addons for elementor · CWE-79 XSS	Medium5.4	—	0.2%	Nov 9, 2024
21Monitor	CVE-2025-22646No exploit	WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerabilityathemes · athemes addons for elementor · CWE-79 XSS	Medium5.4	—	0.2%	Mar 27, 2025
21Monitor	CVE-2024-13547No exploit	aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scriptingathemes · athemes addons for elementor · CWE-79 XSS	Medium5.4	—	0.2%	Feb 1, 2025

CVE-2025-32158
35Monitor
WordPress aThemes Addons for Elementor plugin <= 1.1.3 - Local File Inclusion vulnerability
HighCVSS 8.8No exploitEPSS 0%
athemes · athemes addons for elementorApr 10, 2025
CVE-2024-4036
21Monitor
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · sydney toolboxMay 2, 2024
CVE-2024-1447
21Monitor
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · sydney toolboxFeb 28, 2024
CVE-2024-3208
21Monitor
Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · sydney toolboxApr 9, 2024
CVE-2024-2936
21Monitor
Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · sydney toolboxMar 29, 2024
CVE-2024-4473
21Monitor
Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · sydney toolboxMay 14, 2024
CVE-2024-51675
21Monitor
WordPress aThemes Addons for Elementor plugin <= 1.0.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · athemes addons for elementorNov 9, 2024
CVE-2025-22646
21Monitor
WordPress aThemes Addons for Elementor plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · athemes addons for elementorMar 27, 2025
CVE-2024-13547
21Monitor
aThemes Addons for Elementor <= 1.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
athemes · athemes addons for elementorFeb 1, 2025