Spoonthemes

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-49752 Dec 20, 18:15 CRITICAL Act Now

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoon themes Adifier - Classified Ads WordPress Theme.1.4. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress SQLi Adifier Spoonthemes

NVD

CVSS 3.1

9.3

EPSS

0.1%

CVE-2023-49750 Dec 19, 21:15 CRITICAL Act Now

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spoonthemes Couponis - Affiliate & Submitting Coupons WordPress Theme.2. Rated critical severity (CVSS 9.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress SQLi Couponis Spoonthemes

NVD

CVSS 3.1

9.3

EPSS

0.2%

CVE-2023-49187 Dec 15, 15:15 HIGH This Week

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spoonthemes Adifier - Classified Ads WordPress Theme allows Reflected XSS.1.4. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Adifier Spoonthemes

NVD

CVSS 3.1

7.1

EPSS

0.2%

CVE-2023-49752

EPSS 0% CVSS 9.3

CRITICAL Act Now

WordPress SQLi Adifier +1

NVD

CVE-2023-49750

EPSS 0% CVSS 9.3

CRITICAL Act Now

WordPress SQLi Couponis +1

NVD

CVE-2023-49187

EPSS 0% CVSS 7.1

HIGH This Week

WordPress XSS Adifier +1

NVD