Themify kayıtları

themify üreticisine ait 32 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 1
Düzeltme kaydı olan: %50
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

32 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2013-20002İstismar yok	Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/ththemify · framework · CWE-434 pre-auth RCE Dosya yükleme	Kritik9,8	—	%3,9	17 Haz 2021
35İzleyin	CVE-2023-46149İstismar yok	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Uploadthemify · ultra · CWE-434 Dosya yükleme	Yüksek8,8	—	%0,6	20 Ara 2023
35İzleyin	CVE-2023-46145İstismar yok	WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerabilitythemify · ultra · CWE-269	Yüksek8,8	—	%0,6	17 May 2024
35İzleyin	CVE-2023-46147İstismar yok	WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injectionthemify · ultra · CWE-502 Deserializasyon	Yüksek8,8	—	%0,5	20 Ara 2023
35İzleyin	CVE-2023-46148İstismar yok	WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerabilitythemify · ultra · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	19 Haz 2024
35İzleyin	CVE-2023-46146İstismar yok	WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerabilitythemify · ultra · CWE-862 Erişim denetimi (IDOR)	Yüksek8,8	—	%0,4	19 Haz 2024
35İzleyin	CVE-2024-24872İstismar yok	WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)themify · builder · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,2	21 Şub 2024
30İzleyin	CVE-2024-6027İstismar yok	Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameterthemify · product filter · CWE-89 Kimlik doğrulamasız SQL enjeksiyonu	Yüksek7,5	—	%0,8	21 Haz 2024
26İzleyin	CVE-2024-56216İstismar yok	WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerabilitythemify · builder · CWE-98	Orta6,5	—	%0,5	31 Ara 2024
24İzleyin	CVE-2022-1532İstismar yok	Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scriptingthemify · woocommerce product filter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	13 Haz 2022
24İzleyin	CVE-2024-3032Kavram kanıtı	Themify Builder < 7.5.8 - Open Redirectthemify · builder · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta6,1	—	%0,8	13 Haz 2024
24İzleyin	CVE-2022-1047İstismar yok	Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scriptingthemify · post type builder search addon · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,8	9 May 2022
24İzleyin	CVE-2023-2654İstismar yok	Conditional Menus < 1.2.1 - Reflected XSSthemify · conditional menus · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	19 Haz 2023
24İzleyin	CVE-2024-2278İstismar yok	WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSSthemify · woocommerce product filter · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	1 Nis 2024
24İzleyin	CVE-2024-9385İstismar yok	Themify Builder <= 7.6.2 - Reflected Cross-Site Scriptingthemify · builder · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	4 Eki 2024
24İzleyin	CVE-2024-13319İstismar yok	Themify Builder <= 7.6.5 - Reflected Cross-Site Scriptingthemify · themify builder · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	22 Oca 2025
21İzleyin	CVE-2021-24129İstismar yok	Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scriptingthemify · portfolio post · CWE-79 XSS	Orta5,4	—	%0,7	18 Mar 2021
21İzleyin	CVE-2022-0200İstismar yok	Themify Portfolio Post < 1.1.7 - Reflected Cross-Site Scriptingthemify · portfolio post · CWE-79 XSS	Orta5,4	—	%0,6	14 Şub 2022
21İzleyin	CVE-2022-4464İstismar yok	Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSSthemify · portfolio post · CWE-79 XSS	Orta5,4	—	%0,5	16 Oca 2023
21İzleyin	CVE-2023-0362İstismar yok	Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSSthemify · portfolio post · CWE-79 XSS	Orta5,4	—	%0,5	13 Şub 2023
21İzleyin	CVE-2022-4787İstismar yok	Themify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcodethemify · shortcodes · CWE-79 XSS	Orta5,4	—	%0,5	30 Oca 2023
21İzleyin	CVE-2024-4567İstismar yok	Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcodethemify · themify shortcodes · CWE-79 XSS	Orta5,4	—	%0,4	14 May 2024
21İzleyin	CVE-2022-32970İstismar yok	WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)themify · portfolio post · CWE-79 XSS	Orta5,4	—	%0,4	10 May 2023
21İzleyin	CVE-2024-2732İstismar yok	Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemify · themify shortcodes · CWE-79 XSS	Orta5,4	—	%0,3	25 Mar 2024
21İzleyin	CVE-2023-51693İstismar yok	WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)themify · icons · CWE-79 XSS	Orta5,4	—	%0,3	1 Şub 2024

CVE-2013-20002
40Planlayın
Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/th
KritikCVSS 9,8İstismar yokEPSS %4
- pre-auth RCE
- Dosya yükleme
themify · framework17 Haz 2021
CVE-2023-46149
35İzleyin
WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload
YüksekCVSS 8,8İstismar yokEPSS %1
- Dosya yükleme
themify · ultra20 Ara 2023
CVE-2023-46145
35İzleyin
WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
themify · ultra17 May 2024
CVE-2023-46147
35İzleyin
WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection
YüksekCVSS 8,8İstismar yokEPSS %0
- Deserializasyon
themify · ultra20 Ara 2023
CVE-2023-46148
35İzleyin
WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
themify · ultra19 Haz 2024
CVE-2023-46146
35İzleyin
WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
themify · ultra19 Haz 2024
CVE-2024-24872
35İzleyin
WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- CSRF
themify · builder21 Şub 2024
CVE-2024-6027
30İzleyin
Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
- SQL enjeksiyonu
themify · product filter21 Haz 2024
CVE-2024-56216
26İzleyin
WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability
OrtaCVSS 6,5İstismar yokEPSS %0
themify · builder31 Ara 2024
CVE-2022-1532
24İzleyin
Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
themify · woocommerce product filter13 Haz 2022
CVE-2024-3032
24İzleyin
Themify Builder < 7.5.8 - Open Redirect
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- Açık yönlendirme
themify · builder13 Haz 2024
CVE-2022-1047
24İzleyin
Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
themify · post type builder search addon9 May 2022
CVE-2023-2654
24İzleyin
Conditional Menus < 1.2.1 - Reflected XSS
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
themify · conditional menus19 Haz 2023
CVE-2024-2278
24İzleyin
WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
themify · woocommerce product filter1 Nis 2024
CVE-2024-9385
24İzleyin
Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
themify · builder4 Eki 2024
CVE-2024-13319
24İzleyin
Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
themify · themify builder22 Oca 2025
CVE-2021-24129
21İzleyin
Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
themify · portfolio post18 Mar 2021
CVE-2022-0200
21İzleyin
Themify Portfolio Post < 1.1.7 - Reflected Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
themify · portfolio post14 Şub 2022
CVE-2022-4464
21İzleyin
Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
themify · portfolio post16 Oca 2023
CVE-2023-0362
21İzleyin
Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
themify · portfolio post13 Şub 2023
CVE-2022-4787
21İzleyin
Themify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themify · shortcodes30 Oca 2023
CVE-2024-4567
21İzleyin
Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themify · themify shortcodes14 May 2024
CVE-2022-32970
21İzleyin
WordPress Themify Portfolio Post Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themify · portfolio post10 May 2023
CVE-2024-2732
21İzleyin
Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themify · themify shortcodes25 Mar 2024
CVE-2023-51693
21İzleyin
WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
themify · icons1 Şub 2024