Skip to content
OpenAdvisories

Vendor

TeconceTheme

15 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.1

    WordPress Mayosis Core plugin <= 5.4.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions.

  • High 7.2

    WordPress Allmart plugin <= 1.0.0 - Server Side Request Forgery (SSRF) Vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0.

  • High 7.5

    Mayosis Core <= 5.4.1 - Unauthenticated Arbitrary File Read

    The Mayosis Core plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.4.1 via the library/wave-audio/peaks/remote_dl.php file. This makes it possible for unauthenticated attackers to read the contents of arbitrary …