Skip to content
OpenAdvisories

Vendor

Theme nectar

9 known vulnerabilities.

Products

Salient Core 4 Salient Shortcodes 3 Salient Portfolio 1 Salient 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-68079

    WordPress Salient Shortcodes plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Shortcodes salient-shortcodes allows Stored XSS.This issue affects Salient Shortcodes: from n/a through <= 1.5.4.

    Theme nectar Salient Shortcodes
  • Medium 6.5
    CVE-2025-68078

    WordPress Salient Portfolio theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Portfolio salient-portfolio allows Stored XSS.This issue affects Salient Portfolio: from n/a through <= 1.8.2.

    Theme nectar Salient Portfolio
  • Medium 4.3
    CVE-2025-59001

    WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salient Core: from n/a through <= 3.0.8.

    Theme nectar Salient Core
  • Medium 4.3
    CVE-2025-62028

    WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0.

    Theme nectar Salient
  • Medium 6.4
    CVE-2024-3811

    Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Salient Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'icon' shortcode in all versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on user supplied attributes. This…

    Theme nectar Salient Shortcodes Web / CMS
  • Medium 6.5
    CVE-2023-48749

    WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Stored XSS.This issue affects Salient Core: from n/a through 2.0.2.

    Theme nectar Salient Core