Skip to content
OpenAdvisories

Vendor

AlThemist

3 known vulnerabilities.

Products

Lafka Plugin 1 Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme 1 Zass - WooCommerce Theme for Handmade Artists and Artisans 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-1233

    Lafka Plugin <= 7.1.0 - Missing Authorization to Authenticated (Subscriber+) Theme Option Update

    The Lafka Plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_options_upload' AJAX function in all versions up to, and including, 7.1.0. This makes it possible for authenticated attackers, with subscriber-…

    AlThemist Lafka Plugin Web / CMS
  • Medium 4.3
    CVE-2024-13810

    Zass - WooCommerce Theme for Handmade Artists and Artisans <= 3.9.9.10 - Missing Authorization to Authenticated (Subscriber+) Demo Import

    The Zass - WooCommerce Theme for Handmade Artists and Artisans theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'zass_import_zass' AJAX actions in all versions up to, and including, 3.9.9.10. This makes it poss…

    AlThemist Zass - WooCommerce Theme for Handmade Artists and Artisans Web / CMS
  • Medium 4.3
    CVE-2024-13811

    Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme <= 4.5.7 - Missing Authorization to Authenticated (Subscriber+) Demo Import

    The Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'lafka_import_lafka' AJAX actions in all versions up to, and including, 4.5.7. This make…

    AlThemist Lafka - Multi Store Burger - Pizza & Food Delivery WooCommerce Theme Web / CMS