Skip to content
Noroxi

ThemePunch records

17 published records for vendor themepunch.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 5.9%
Pre-auth RCE
1
With a fix record
47.1%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

17 records
  • CVE-2014-9735
    53Plan

    The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does

    HighCVSS 7.5WeaponizedEPSS 76%

    themepunch · showbiz proJun 30, 2015

  • CVE-2015-9499
    44Plan

    The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

    CriticalCVSS 9.8Proof of conceptEPSS 16%

    themepunch · showbiz proOct 22, 2019

  • CVE-2023-2359
    36Monitor

    Revolution Slider <= 6.6.12 - Author+ Remote Code Execution

    HighCVSS 8.8No exploitEPSS 3%

    themepunch · slider revolutionJun 19, 2023

  • CVE-2023-6528
    35Monitor

    Slider Revolution < 6.6.19 - Author+ Insecure Deserialization leading to RCE

    HighCVSS 8.8No exploitEPSS 1%

    themepunch · slider revolutionJan 8, 2024

  • CVE-2023-47784
    35Monitor

    WordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File Upload

    HighCVSS 8.8No exploitEPSS 1%

    themepunch · slider revolutionDec 20, 2023

  • CVE-2024-34444
    35Monitor

    WordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    themepunch · slider revolutionJun 19, 2024

  • CVE-2023-47771
    33Monitor

    WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerability

    HighCVSS 8.3No exploitEPSS 0%

    themepunch ohg · essential gridJun 19, 2024

  • CVE-2014-9734
    26Monitor

    Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbit

    MediumCVSS 5.0Proof of conceptEPSS 21%

    themepunch · slider revolutionJun 30, 2015

  • CVE-2023-47684
    24Monitor

    WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 1%

    themepunch · essential gridNov 13, 2023

  • CVE-2024-4092
    21Monitor

    Slider Revolution <= 6.7.7 - Authenticated (Author+) Stored Cross-Site Scripting via htmltag Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionMay 2, 2024

  • CVE-2023-47772
    21Monitor

    WordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionNov 20, 2023

  • CVE-2024-8107
    21Monitor

    Slider Revolution <= 6.7.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionOct 1, 2024

  • CVE-2024-34443
    21Monitor

    WordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionJun 19, 2024

  • CVE-2024-4581
    21Monitor

    Slider Revolution <= 6.7.11 - Authenticated (Author+) Stored Cross-Site Scripting via Add Layer class, id, and title Attributes

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionJun 4, 2024

  • CVE-2024-4637
    21Monitor

    Slider Revolution <= 6.7.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Elementor wrapperid and zindex

    MediumCVSS 5.4No exploitEPSS 0%

    themepunch · slider revolutionJun 4, 2024

  • CVE-2024-37449
    19Monitor

    WordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 4.8No exploitEPSS 0%

    themepunch · slider revolutionJul 21, 2024

  • CVE-2015-5151
    18Monitor

    Cross-site scripting (XSS) vulnerability in the Slider Revolution (revslider) plugin 4.2.2 for WordPress allows remote attackers to inject a

    MediumCVSS 4.3No exploitEPSS 2%

    themepunch · slider revolutionJun 30, 2015