Skip to content
OpenAdvisories

Product · Theme nectar

Salient Core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-3812

    Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode

    The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_linea' attribute. This makes it possible for authenticated attackers, with contributor-level and abov…

    Theme nectar Salient Core Web / CMS
  • High 7.1
    CVE-2023-48748

    WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue affects Salient Core: from n/a through 2.0.2.

    Theme nectar Salient Core