Skip to content
OpenAdvisories

Vendor

nsthemes

5 known vulnerabilities.

Products

NS Product icon badge 1 NS Ie Compatibility Fixer 1 Advanced Social Pixel 1 NS Simple Intro Loader 1 NS Coupon To Become Customer 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-8707

    NS Product icon badge <= 1.2.4 - Reflected Cross-Site Scripting via PHP_SELF

    The NS Product icon badge plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via PHP_SELF in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated atta…

    nsthemes NS Product icon badge Web / CMS
  • Medium 4.3
    CVE-2025-14845

    NS IE Compatibility Fixer <= 2.1.5 - Cross-Site Request Forgery to Plugin Settings Update

    The NS IE Compatibility Fixer plugin for WordPress is vulnerable to Cross-Site Request Forgery (CSRF) in all versions up to, and including, 2.1.5. This is due to missing nonce validation on the settings update functionality. This makes it possible for unauthe…

    nsthemes NS Ie Compatibility Fixer Web / CMS
  • Medium 5.9
    CVE-2023-27422

    WordPress NS Coupon to Become Customer Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions.

    nsthemes NS Coupon To Become Customer
  • Medium 5.9
    CVE-2023-24381

    WordPress Advanced Social Pixel Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions.

    nsthemes Advanced Social Pixel