Skip to content
OpenAdvisories

Vendor

SeventhQueen

11 known vulnerabilities.

Products

Kleo 3 Sweet Date 2 K Elements 2 BuddyApp 1 Typer Core 1 SweetDate Core 1 Restrictions for BuddyPress 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12391

    Restrictions for BuddyPress <= 1.5.2 - Missing Authorization to Unauthenticated Tracking Status Update

    The Restrictions for BuddyPress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_optin_optout() function in all versions up to, and including, 1.5.2. This makes it possible for unauthentic…

    SeventhQueen Restrictions for BuddyPress Web / CMS
  • Medium 6.5
    CVE-2025-64362

    WordPress K Elements plugin < 5.5.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SeventhQueen K Elements k-elements allows DOM-Based XSS.This issue affects K Elements: from n/a through < 5.5.0.

    SeventhQueen K Elements
  • Medium 5.3
    CVE-2025-39367

    WordPress Kleo theme < 5.4.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in SeventhQueen Kleo kleo.This issue affects Kleo: from n/a through < 5.4.4.

    SeventhQueen Kleo
  • Medium 4.3
    CVE-2024-12102

    Typer Core <= 1.9.6 - Authenticated (Contributor+) Post Disclosure

    The Typer Core plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.9.6 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authentica…

    SeventhQueen Typer Core Web / CMS