Skip to content
OpenAdvisories

Product · extendthemes

Materialis

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2023-3204

    Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update

    The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. This is due to missing authorization checks on the companion_disable_popup() function called via an AJAX action. This makes it poss…

    extendthemes Materialis Web / CMS