İçeriğe atla
Noroxi

Themefic kayıtları

themefic üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%61,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 23
  2. 24
  3. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2022-47586
    39İzleyin

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %1

    themefic · ultimate addons for contact form 719 Haz 2023

  • CVE-2025-24650
    36İzleyin

    WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1İstismar yokEPSS %1

    themefic · tourfic24 Oca 2025

  • CVE-2024-29135
    35İzleyin

    WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    themefic · tourfic19 Mar 2024

  • CVE-2024-29136
    35İzleyin

    WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %1

    themefic · tourfic19 Mar 2024

  • CVE-2023-30495
    32İzleyin

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection

    YüksekCVSS 8,1İstismar yokEPSS %1

    themefic · ultimate addons for contact form 720 Ara 2023

  • CVE-2025-6220
    28İzleyin

    Ultimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    themefic · ultimate addons for contact form 718 Haz 2025

  • CVE-2025-47549
    28İzleyin

    WordPress BEAF plugin <= 4.6.10 - Arbitrary File Upload Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    themefic · ultimate before after image slider \& gallery7 May 2025

  • CVE-2025-47550
    28İzleyin

    WordPress Instantio plugin <= 3.3.16 - Arbitrary File Upload Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    themefic · instantio7 May 2025

  • CVE-2023-1615
    26İzleyin

    The Ultimate Addons for Contact Form 7 plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in versions up to, and inc

    OrtaCVSS 6,5İstismar yokEPSS %1

    themefic · ultimate addons for contact form 79 Haz 2023

  • CVE-2024-12032
    26İzleyin

    Tourfic – Ultimate Hotel Booking, Travel Booking & Apartment Booking WordPress Plugin | WooCommerce Booking <= 2.15.3 - Authenticated (Subscriber+) SQL Injectio

    OrtaCVSS 6,5İstismar yokEPSS %1

    themefic · tourfic25 Ara 2024

  • CVE-2024-29137
    24İzleyin

    WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    themefic · tourfic19 Mar 2024

  • CVE-2023-2803
    24İzleyin

    Ultimate Addons for Contact Form 7 < 3.1.29 - Reflected XSS

    OrtaCVSS 6,1İstismar yokEPSS %0

    themefic · ultimate addons for contact form 714 Ağu 2023

  • CVE-2023-49766
    24İzleyin

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    themefic · ultimate addons for contact form 714 Ara 2023

  • CVE-2023-30493
    24İzleyin

    WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    themefic · ultimate addons for contact form 727 Eyl 2023

  • CVE-2025-6212
    24İzleyin

    Ultra Addons for Contact Form 7 3.5.11 - 3.5.19 - Unauthenticated Stored Cross-Site Scripting via Database module

    OrtaCVSS 6,1İstismar yokEPSS %0

    themefic · ultimate addons for contact form 726 Haz 2025

  • CVE-2024-29134
    21İzleyin

    WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    themefic · tourfic19 Mar 2024

  • CVE-2025-6756
    21İzleyin

    Ultra Addons for Contact Form 7 <= 3.5.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via UACF7_CUSTOM_FIELDS Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    themefic · ultimate addons for contact form 71 Tem 2025

  • CVE-2023-2802
    19İzleyin

    Ultimate Addons for Contact Form 7 < 3.1.29 - Admin+ Stored XSS

    OrtaCVSS 4,8İstismar yokEPSS %0

    themefic · ultimate addons for contact form 714 Ağu 2023