Skip to main content

Materialis

2 CVEs product

Monthly

CVE-2023-3204 Jun 20, 02:15 MEDIUM PATCH This Month

The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Materialis Wordpress Theme Extendthemes
NVD
CVSS 3.1
6.5
EPSS
0.3%
CVE-2019-25142 Jun 07, 02:15 HIGH POC PATCH This Week

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Authentication Bypass Materialis Mesmerize Wordpress Theme +1
NVD WPScan VulDB
CVSS 3.1
8.8
EPSS
0.6%
EPSS 0% CVSS 6.5
MEDIUM PATCH This Month

The Materialis theme for WordPress is vulnerable to limited arbitrary options updates in versions up to, and including, 1.1.24. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

WordPress Authentication Bypass Materialis +2
NVD
EPSS 1% CVSS 8.8
HIGH POC PATCH This Week

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Authentication Bypass Materialis +3
NVD WPScan VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy