detheme records
11 published records for vendor detheme.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 36.4%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10
- CWE-639 Authorization Bypass Through User-Controlled Key1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
11 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2021-24270No exploit | DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSSdetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.5% | May 5, 2021 |
21Monitor | CVE-2024-4374No exploit | DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgetsdetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.3% | May 18, 2024 |
21Monitor | CVE-2024-5418No exploit | DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attributedetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.3% | May 30, 2024 |
21Monitor | CVE-2024-32508No exploit | WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilitydetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.3% | Apr 17, 2024 |
21Monitor | CVE-2024-6283No exploit | DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widgetdetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.3% | Jun 27, 2024 |
21Monitor | CVE-2025-1526No exploit | DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scriptingdetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.2% | Mar 14, 2025 |
21Monitor | CVE-2024-47632No exploit | WordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerabilitydetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.2% | Oct 5, 2024 |
21Monitor | CVE-2024-34575No exploit | WordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilitydetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.2% | May 17, 2024 |
21Monitor | CVE-2024-13644No exploit | DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widgetdetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.2% | Feb 12, 2025 |
21Monitor | CVE-2025-26772No exploit | WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilitydetheme · dethemekit for elementor · CWE-79 | Medium5.4 | — | 0.2% | Feb 17, 2025 |
17Monitor | CVE-2025-0661No exploit | DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosuredetheme · dethemekit for elementor · CWE-639 | Medium4.3 | — | 0.2% | Feb 13, 2025 |
- CVE-2021-2427021Monitor
DethemeKit For Elementor < 1.5.5.5 - Contributor+ Stored XSS
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorMay 5, 2021
- CVE-2024-437421Monitor
DethemeKit For Elementor <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorMay 18, 2024
- CVE-2024-541821Monitor
DethemeKit For Elementor <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via slitems Attribute
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorMay 30, 2024
- CVE-2024-3250821Monitor
WordPress DethemeKit For Elementor plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorApr 17, 2024
- CVE-2024-628321Monitor
DethemeKit For Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via URL Parameter of the De Gallery Widget
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorJun 27, 2024
- CVE-2025-152621Monitor
DethemeKit for Elementor <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorMar 14, 2025
- CVE-2024-4763221Monitor
WordPress DethemeKit For Elementor plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorOct 5, 2024
- CVE-2024-3457521Monitor
WordPress DethemeKit For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorMay 17, 2024
- CVE-2024-1364421Monitor
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via De Gallery Widget
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorFeb 12, 2025
- CVE-2025-2677221Monitor
WordPress DethemeKit For Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%detheme · dethemekit for elementorFeb 17, 2025
- CVE-2025-066117Monitor
DethemeKit For Elementor <= 2.1.8 - Authenticated (Contributor+) Protected Post Disclosure
MediumCVSS 4.3No exploitEPSS 0%detheme · dethemekit for elementorFeb 13, 2025