Skip to content
OpenAdvisories

Vendor

Select-Themes

39 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    WordPress Tonda Membership plugin <= 1.0.1 - Privilege Escalation vulnerability

    Unauthenticated Privilege Escalation in Tonda Membership <= 1.0.1 versions.

  • Critical 9.8

    WordPress Borgholm theme < 1.6 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm: from n/a through < 1.6.

  • Critical 9.8

    SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover

    The SetSail Membership plugin for WordPress is vulnerable to in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log i…

  • Critical 9.0

    WordPress Stockholm theme <= 9.6 - Unauthenticated Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local File Inclusion.This issue affects Stockholm: from n/a through 9.6.