Skip to content
OpenAdvisories

Vendor

ThemeGrill

41 known vulnerabilities.

Products

User Registration 15 Masteriyo - LMS 4 ColorMag 3 Himalayas 2 ThemeGrill Demo Importer 2 User Registration Stripe 2 Zakra 2 Registration Form for WooCommerce 2 Maintenance Page 2 Magazine Blocks 1 Spacious 1 Esteem 1 Accelerate 1 SmartSMTP 1 ColorNews 1 eStore 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2024-0679 Public exploit

    ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation

    The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-l…

    ThemeGrill ColorMag Web / CMS