Skip to content
OpenAdvisories

Vendor

themeinwp

5 known vulnerabilities.

Products

Default Mag 1 Booster Extension 1 Demo Import Kit 1 Social Share With Floating Bar 1 NewsXpress 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-8790

    Social Share With Floating Bar <= 1.0.3 - Reflected Cross-Site Scripting

    The Social Share With Floating Bar plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.0.3. This makes it possible for unauthentic…

    themeinwp Social Share With Floating Bar Web / CMS
  • Medium 5.3
    CVE-2024-2109

    Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display

    The Booster Extension plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.2.0 via the 'booster_extension_authorbox_shortcode_display' function. This makes it possible for unauthenticated attackers to ex…

    themeinwp Booster Extension Web / CMS
  • Medium 4.3
    CVE-2024-31938

    WordPress NewsXpress theme <= 1.0.7 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Themeinwp NewsXpress.This issue affects NewsXpress: from n/a through 1.0.7.

    themeinwp NewsXpress
  • Medium 4.3
    CVE-2024-31386

    Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Hidekazu Ishikawa X-T9, Hidekazu Ishikawa Lightning, themeinwp Default Mag, Out the Box Namaha, Out the Box CityLogic, Marsian i-max, Jetmonsters Emmet Lite, Macho Themes Decode, Wayneconnor Sliding Door, Out…

    jetmonsters themeinwp marsian Macho Themes