Skip to content
OpenAdvisories

Vendor

Themes Awesome

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.3

    WordPress History Timeline plugin <= 1.0.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in themesawesome History Timeline timeline-awesome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects History Timeline: from n/a through <= 1.0.6.

  • Medium 4.3

    School Management System – SakolaWP <= 1.0.8 - Cross-Site Request Forgery to Exam Setting Manipulation

    The School Management System – SakolaWP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.8. This is due to missing or incorrect nonce validation on the 'save_exam_setting' and 'delete_exam_setting' act…