Skip to content
Noroxi

MuffinGroup records

17 published records for vendor muffingroup.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
47.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2022-3861
    36Monitor

    Betheme <= 26.5.1.4 - Authenticated (Subscriber+) PHP Object Injection

    HighCVSS 8.8No exploitEPSS 2%

    muffingroup · bethemeNov 21, 2022

  • CVE-2022-45077
    35Monitor

    WordPress Betheme theme <= 26.5.1.4 - Auth. PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    muffingroup · bethemeNov 17, 2022

  • CVE-2024-2694
    35Monitor

    Betheme <= 27.5.6 - Authenticated (Contributor+) PHP Object Injection

    HighCVSS 8.8No exploitEPSS 0%

    muffingroup · bethemeAug 30, 2024

  • CVE-2022-45356
    35Monitor

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    muffingroup · bethemeMar 25, 2024

  • CVE-2022-45353
    32Monitor

    WordPress Betheme theme <= 26.6.1 is vulnerable to Broken Access Control

    HighCVSS 8.1No exploitEPSS 0%

    muffingroup · bethemeJan 14, 2023

  • CVE-2023-47770
    30Monitor

    WordPress BeTheme theme <= 27.1.1 - Contributor+ Broken Access Control vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    muffingroup · bethemeJun 19, 2024

  • CVE-2023-39998
    28Monitor

    WordPress BeTheme theme <= 27.1.1 - Author+ Broken Access Control vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    muffingroup · bethemeJun 19, 2024

  • CVE-2022-3747
    26Monitor

    Becustom <= 1.0.5.2 - Cross-Site Request Forgery

    MediumCVSS 6.5No exploitEPSS 0%

    muffingroup · becustomNov 29, 2022

  • CVE-2023-29101
    24Monitor

    WordPress Betheme Theme <= 26.7.5 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    muffingroup · bethemeMay 10, 2023

  • CVE-2022-45351
    21Monitor

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeMar 25, 2024

  • CVE-2022-45363
    21Monitor

    WordPress Betheme premium theme <= 26.6.1 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeNov 22, 2022

  • CVE-2024-5567
    21Monitor

    Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeSep 13, 2024

  • CVE-2025-3077
    21Monitor

    Betheme <= 28.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeApr 16, 2025

  • CVE-2024-3998
    21Monitor

    Betheme | Responsive Multipurpose WordPress & WooCommerce Theme <= 27.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeAug 30, 2024

  • CVE-2025-0450
    21Monitor

    Betheme <= 27.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS

    MediumCVSS 5.4No exploitEPSS 0%

    muffingroup · bethemeJan 21, 2025

  • CVE-2022-45352
    17Monitor

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    muffingroup · bethemeMar 25, 2024

  • CVE-2022-45349
    17Monitor

    WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    muffingroup · bethemeMar 25, 2024