Skip to content
OpenAdvisories

Vendor

SpabRice

4 known vulnerabilities.

Products

Nyla 1 Vavo Core 1 Pond 1 Mogi 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39642

    WordPress Nyla theme <= 1.7 - Arbitrary Shortcode Execution vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: from n/a through 1.7.

    SpabRice Nyla
  • Medium 5.3
    CVE-2026-39637

    WordPress Mogi theme <= 1.2.3 - Arbitrary Shortcode Execution vulnerability

    Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a through <= 1.2.3.

    SpabRice Mogi