Skip to content
OpenAdvisories

Vendor

peregrinethemes

4 known vulnerabilities.

Products

Shopwell 1 Hester Core 1 Hester 1 Bloglo 1 Blogvi 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-57656

    WordPress Hester Core plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

    Author Cross Site Scripting (XSS) in Hester Core <= 1.1.8 versions.

    peregrinethemes Hester Core
  • Medium 5.3
    CVE-2026-25333

    WordPress Shopwell theme <= 1.0.11 - Broken Access Control vulnerability

    Missing Authorization vulnerability in peregrinethemes Shopwell shopwell allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shopwell: from n/a through <= 1.0.11.

    peregrinethemes Shopwell
  • Medium 6.5
    CVE-2025-26734

    WordPress Hester plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in peregrinethemes Hester hester allows Stored XSS.This issue affects Hester: from n/a through <= 1.1.10.

    peregrinethemes Hester
  • Medium 6.5
    CVE-2024-35715

    WordPress Bloglo and Blogvi themes affected by Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in peregrinethemes Bloglo, peregrinethemes Blogvi allows Stored XSS.This issue affects Bloglo: from n/a through 1.1.3; Blogvi: from n/a through 1.0.5.

    peregrinethemes Bloglo Blogvi