Skip to content
OpenAdvisories

Vendor

Theme nectar

9 known vulnerabilities.

Products

Salient Core 4 Salient Shortcodes 3 Salient Portfolio 1 Salient 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2024-3812

    Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_linea' attribute. This makes it possible for authenticated attackers, with contributor-level and abov…

    Theme nectar Salient Core Web / CMS
  • High 8.8
    CVE-2024-3810

    Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image' attribute. This makes it possible for authenticated attackers, with contributor-level and above perm…

    Theme nectar Salient Shortcodes Web / CMS
  • High 7.1
    CVE-2023-48748

    WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2.

    Theme nectar Salient Core