Skip to content
Noroxi

weavertheme records

6 published records for vendor weavertheme.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2023-4971
    28Monitor

    Weaver Xtreme Theme Support < 6.3.1 - Admin+ PHP Object Injection

    HighCVSS 7.2No exploitEPSS 1%

    weavertheme · weaver xtreme theme supportOct 16, 2023

  • CVE-2023-1403
    21Monitor

    Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

    MediumCVSS 5.4No exploitEPSS 1%

    weavertheme · weaver xtreme themeJun 9, 2023

  • CVE-2023-1404
    21Monitor

    Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

    MediumCVSS 5.4No exploitEPSS 1%

    weavertheme · weaver show postsJun 9, 2023

  • CVE-2023-0276
    21Monitor

    Weaver Xtreme Theme Support < 6.2.7 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    weavertheme · weaver xtreme theme supportApr 24, 2023

  • CVE-2023-6990
    21Monitor

    Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    weavertheme · weaver xtreme theme supportJan 11, 2024

  • CVE-2024-4939
    21Monitor

    Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    weavertheme · weaver xtreme theme supportJun 5, 2024