Themepoints records

8 published records for vendor themepoints.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2024-13704No exploit	Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scriptingthemepoints · super testimonials · CWE-80 Pre-auth XSS	Medium6.1	—	0.3%	Feb 18, 2025
21Monitor	CVE-2023-5667No exploit	Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethemepoints · tab ultimate · CWE-79 XSS	Medium5.4	—	0.5%	Nov 22, 2023
21Monitor	CVE-2023-5666No exploit	Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethemepoints · accordion · CWE-79 XSS	Medium5.4	—	0.5%	Oct 30, 2023
21Monitor	CVE-2023-5613No exploit	Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethemepoints · super testimonials · CWE-79 XSS	Medium5.4	—	0.4%	Oct 20, 2023
21Monitor	CVE-2023-5639No exploit	Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodethemepoints · team showcase · CWE-79 XSS	Medium5.4	—	0.4%	Oct 18, 2023
21Monitor	CVE-2023-47809No exploit	WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)themepoints · accordion · CWE-79 XSS	Medium5.4	—	0.4%	Nov 22, 2023
19Monitor	CVE-2022-3539No exploit	Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scriptingthemepoints · super testimonials · CWE-79 XSS	Medium4.8	—	0.5%	Nov 14, 2022
19Monitor	CVE-2021-36858No exploit	WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerabilitythemepoints · super testimonials · CWE-79 XSS	Medium4.8	—	0.5%	Oct 28, 2022

CVE-2024-13704
24Monitor
Super Testimonials <= 4.0.1 - Unauthenticated Stored Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
themepoints · super testimonialsFeb 18, 2025
CVE-2023-5667
21Monitor
Tab Ultimate <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 1%
- XSS
themepoints · tab ultimateNov 22, 2023
CVE-2023-5666
21Monitor
Accordion <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 1%
- XSS
themepoints · accordionOct 30, 2023
CVE-2023-5613
21Monitor
Super Testimonials <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themepoints · super testimonialsOct 20, 2023
CVE-2023-5639
21Monitor
Team Showcase <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themepoints · team showcaseOct 18, 2023
CVE-2023-47809
21Monitor
WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themepoints · accordionNov 22, 2023
CVE-2022-3539
19Monitor
Testimonials (Free < 2.7, Pro < 1.0.8) - Admin+ Stored Cross-Site Scripting
MediumCVSS 4.8No exploitEPSS 1%
- XSS
themepoints · super testimonialsNov 14, 2022
CVE-2021-36858
19Monitor
WordPress Testimonials plugin <= 2.6 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
themepoints · super testimonialsOct 28, 2022