Themegrill
Monthly
Authenticated low-privilege users can exploit missing authorization checks in the ThemeGrill User Registration plugin (versions up to 5.2.8) to perform unauthorized actions, potentially altering site data or user information. This broken access control flaw (CWE-862) has a CVSS score of 7.1 and requires network access with low complexity, but no user interaction. No public exploit code or active exploitation has been identified at this time.
Unauthenticated cross-site scripting in the SmartSMTP WordPress plugin (versions 1.2.0 and below) allows a remote, unauthenticated attacker to inject arbitrary JavaScript that executes in the browser of any authenticated user who views the malicious content. The scope change confirmed by the CVSS vector (S:C) means impact extends beyond the injecting session to other users, including administrators. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated privilege escalation in the ThemeGrill Registration Form for WooCommerce WordPress plugin (versions <= 1.0.9) allows remote attackers to elevate privileges without credentials, potentially gaining administrative control over the WordPress site. With a CVSS of 9.8 and no public exploit identified at time of analysis, the flaw is reported by Patchstack and tagged as a Privilege Escalation issue in the WordPress plugin ecosystem.
Broken access control in the WordPress plugin User Registration Stripe (versions <= 1.3.12) allows unauthenticated remote attackers to invoke protected functionality without proper authorization checks. The flaw stems from missing capability validation (CWE-862) and carries a CVSS 3.1 score of 8.2 with high integrity impact. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Broken access control in the User Registration Stripe WordPress plugin (versions 1.3.14 and earlier) allows remote unauthenticated attackers to access functionality that should require authorization, leading to high confidentiality exposure and limited integrity tampering. The flaw is reported by Patchstack and tagged as an authentication bypass, but no public exploit code has been identified at time of analysis. EPSS data was not provided, and the issue is not listed in CISA KEV.
Broken access control in the Masteriyo - LMS WordPress plugin (versions up to and including 2.1.5) allows remote unauthenticated attackers to bypass payment workflows and tamper with protected resources without authorization. The Patchstack advisory characterizes this as a payment bypass issue rooted in a missing authorization check (CWE-862), and no public exploit identified at time of analysis. EPSS data was not provided and the CVE is not currently listed in CISA KEV.
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin versions 5.1.2 and earlier, allowing remote attackers to invoke privileged actions without credentials. The CVSS 7.5 score (AV:N/AC:L/PR:N/UI:N) reflects pure availability impact (A:H) with no confidentiality or integrity loss, and no public exploit identified at time of analysis. The flaw is classified as CWE-862 Missing Authorization and tracked by Patchstack and ENISA EUVD-2026-36911.
Privilege escalation in the ThemeGrill Masteriyo LMS WordPress plugin (versions up to and including 2.2.0) allows authenticated low-privileged users to elevate their permissions to higher roles, including administrator. The flaw stems from incorrect privilege assignment (CWE-266) and carries a CVSS 8.8 with high confidentiality, integrity, and availability impact across the WordPress instance. No public exploit identified at time of analysis, and the Patchstack disclosure is the sole reference currently available.
Missing authorization in ThemeGrill User Registration through 5.3.0 allows unauthenticated remote attackers to perform limited unauthorized modifications on affected WordPress sites, with no confidentiality or availability impact. The issue is a CWE-862 broken access control flaw scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:N), and the exact vulnerable feature or endpoint is not described in the available sources. No CISA KEV listing or public exploit code is identified in the supplied data, and the reported priority is this_month.
Basic cross-site scripting (XSS) in ThemeGrill User Registration through 5.3.0 allows remote attackers to inject script-related HTML/content into pages served by affected WordPress sites. Sites running the vulnerable plugin version are affected, and the independent assessment rates this medium severity (CVSS 5.3) with limited impact and no availability effect indicated. The supplied intelligence shows no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis.
ThemeGrill's User Registration WordPress plugin (versions up to and including 5.2.8) fails to enforce authorization checks on one of its endpoints, letting a low-privilege authenticated user perform actions that should be restricted. Exploitation requires a valid session (CVSS PR:L), but because the plugin's core purpose is open self-service registration, an attacker can typically create the necessary account themselves - no user interaction is needed and the attack is remote and low-complexity. Impact is limited to integrity and availability of the affected functionality (I:L/A:L, no confidentiality impact), rated CVSS 5.4; no public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
WordPress sites running the ThemeGrill User Registration plugin through version 5.2.8 can be queried by unauthenticated remote attackers to retrieve embedded sensitive data, because a missing authorization check (CWE-862) leaves a data-exposing code path reachable without any privilege. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:N), no authentication, user interaction, or non-default configuration is required, and the impact is confined to Low confidentiality with no integrity or availability effect - the attacker gains read access to specific exposed data rather than full account or site compromise. Exploitation is limited to sites that have not upgraded past 5.2.8, and there is no public exploit identified at time of analysis and no confirmation of active exploitation (not listed in CISA KEV); this is a routine patch-management item rather than an emergency.
Stored cross-site scripting in the ThemeGrill User Registration WordPress plugin (versions through 5.2.8) lets an authenticated low-privilege user - realistically anyone who can complete the plugin's own self-service sign-up form when open registration is enabled - persist malicious script into plugin-stored data that later renders in a victim's browser. The payload only fires when a higher-privileged user, typically an administrator reviewing registrations or user records, loads the affected page, so exploitation requires that human view-step and is not automatable against an idle target; CVSS is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and because the flaw is scope-changing it can affect resources beyond the plugin's own security context.
Cross-site request forgery (CSRF) in the ThemeGrill User Registration WordPress plugin through version 5.2.8 allows remote attackers to trick a logged-in privileged user into performing unintended actions, with low integrity and availability impact (CVSS 5.4). Exploitation requires an active authenticated WordPress session and successful social engineering to load attacker-controlled content (UI:R), as reflected in the CVSS vector (PR:N, UI:R). No public exploit code or confirmed active exploitation has been identified at time of analysis, and the independent assessment rates this as a moderate-severity, low-priority issue for most defenders.
Missing access control checks in ThemeGrill's User Registration plugin for WordPress, versions through 5.2.8, let unauthenticated remote users (CVSS PR:N/UI:N) reach restricted functionality that should require higher privileges, resulting in low-impact disclosure of protected data (C:L, I:N, A:N). The issue is rated moderate at CVSS 5.3 and does not by itself enable account takeover, data modification, or code execution, so its practical value to an attacker is information gathering rather than full compromise. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis, and the specific registration endpoint or feature that is improperly authorized is not named in the available data, so the exact exposure surface remains unscoped pending the vendor advisory.
Missing authorization in the ThemeGrill User Registration WordPress plugin, affecting all releases through 5.2.7, lets remote attackers (no authentication or user interaction required per the reported CVSS vector) invoke functionality that should be gated behind capability or role checks, with limited confidentiality, integrity, and availability impact. The reported CVSS 5.6 with AC:H reflects that successful exploitation likely depends on a specific plugin feature, role/permission configuration, or application state rather than working against every default install. No public exploit code and no confirmed active exploitation have been identified at time of analysis, and the available data does not name the precise vulnerable endpoint, so the modified/affected action must be confirmed from the Patchstack advisory.
Cross-site scripting in ThemeGrill's Magazine Blocks WordPress plugin (versions ≤1.8.6) enables an authenticated Contributor to inject malicious scripts into block content that execute in a victim's browser upon page view. The CVSS scope-change metric (S:C) reflects that injected code escapes the plugin context and runs in the victim's browser session, potentially allowing session token theft or unauthorized admin actions. No public exploit code or active exploitation has been identified at time of analysis, but the Patchstack-reported flaw and ENISA EUVD-2026-64788 entry confirm the vulnerability.
Unauthorized plugin installation in the ThemeGrill Accelerate WordPress theme (versions up to and including 1.5.3) is possible because the enqueue_scripts() function performs no WordPress capability check before triggering ThemeGrill Demo Importer plugin installation. Any user holding at least a Subscriber-level account on the affected site can exploit this to install and activate an additional plugin, expanding the attack surface. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Stored Cross-Site Scripting in the Zakra WordPress theme (versions up to and including 4.2.0) allows authenticated Contributors to inject arbitrary JavaScript into site pages via the REST API. The vulnerability stems from a sanitization bypass: while the classic editor code path correctly applies sanitize_hex_color() to three menu-color post meta fields, the REST API registration omits any sanitize_callback, permitting unfiltered values to be written. Those values are later concatenated unsanitized into inline CSS and rendered on every page load, triggering stored XSS against any site visitor. No active exploitation (CISA KEV) is confirmed; a vendor-released patch is available in version 4.2.1.
Unauthenticated broken authentication in the Masteriyo LMS WordPress plugin (versions ≤2.1.8) stems from improper JWT signature verification (CWE-347), allowing remote attackers to forge authentication tokens without valid credentials and gain unauthorized access to protected LMS resources. The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N confirms fully unauthenticated, low-complexity network exploitation, enabling an attacker to impersonate enrolled students or instructors and read or modify course-related data. No public exploit code or active exploitation has been confirmed at time of analysis, and the vulnerability is not listed in CISA KEV.
Information disclosure via missing authorization in ThemeGrill Demo Importer allows unauthenticated remote attackers to access sensitive demo import data. The vulnerability affects all plugin versions up to 2.0.0.6 and requires no user interaction. No active exploitation or public exploit code has been reported, and the EPSS exploitation probability is very low (0.02%).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Magazine Blocks - Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.3.2. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Esteem allows Stored XSS.5.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege escalation in the Masteriyo LMS WordPress plugin (versions up to and including 1.7.2) allows remote unauthenticated attackers to assign themselves elevated privileges due to incorrect privilege assignment logic. With a CVSS score of 9.8 and an EPSS score of 31.54% (97th percentile), this flaw poses significant real-world risk, though no public exploit is identified at time of analysis and it is not listed in CISA KEV.
The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribe_download function hooked via AJAX action in all versions up. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.
The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated low-privilege users can exploit missing authorization checks in the ThemeGrill User Registration plugin (versions up to 5.2.8) to perform unauthorized actions, potentially altering site data or user information. This broken access control flaw (CWE-862) has a CVSS score of 7.1 and requires network access with low complexity, but no user interaction. No public exploit code or active exploitation has been identified at this time.
Unauthenticated cross-site scripting in the SmartSMTP WordPress plugin (versions 1.2.0 and below) allows a remote, unauthenticated attacker to inject arbitrary JavaScript that executes in the browser of any authenticated user who views the malicious content. The scope change confirmed by the CVSS vector (S:C) means impact extends beyond the injecting session to other users, including administrators. No public exploit code has been identified at time of analysis, and this vulnerability is not listed in the CISA KEV catalog.
Unauthenticated privilege escalation in the ThemeGrill Registration Form for WooCommerce WordPress plugin (versions <= 1.0.9) allows remote attackers to elevate privileges without credentials, potentially gaining administrative control over the WordPress site. With a CVSS of 9.8 and no public exploit identified at time of analysis, the flaw is reported by Patchstack and tagged as a Privilege Escalation issue in the WordPress plugin ecosystem.
Broken access control in the WordPress plugin User Registration Stripe (versions <= 1.3.12) allows unauthenticated remote attackers to invoke protected functionality without proper authorization checks. The flaw stems from missing capability validation (CWE-862) and carries a CVSS 3.1 score of 8.2 with high integrity impact. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Broken access control in the User Registration Stripe WordPress plugin (versions 1.3.14 and earlier) allows remote unauthenticated attackers to access functionality that should require authorization, leading to high confidentiality exposure and limited integrity tampering. The flaw is reported by Patchstack and tagged as an authentication bypass, but no public exploit code has been identified at time of analysis. EPSS data was not provided, and the issue is not listed in CISA KEV.
Broken access control in the Masteriyo - LMS WordPress plugin (versions up to and including 2.1.5) allows remote unauthenticated attackers to bypass payment workflows and tamper with protected resources without authorization. The Patchstack advisory characterizes this as a payment bypass issue rooted in a missing authorization check (CWE-862), and no public exploit identified at time of analysis. EPSS data was not provided and the CVE is not currently listed in CISA KEV.
Unauthenticated availability-impacting broken access control affects the ThemeGrill User Registration WordPress plugin versions 5.1.2 and earlier, allowing remote attackers to invoke privileged actions without credentials. The CVSS 7.5 score (AV:N/AC:L/PR:N/UI:N) reflects pure availability impact (A:H) with no confidentiality or integrity loss, and no public exploit identified at time of analysis. The flaw is classified as CWE-862 Missing Authorization and tracked by Patchstack and ENISA EUVD-2026-36911.
Privilege escalation in the ThemeGrill Masteriyo LMS WordPress plugin (versions up to and including 2.2.0) allows authenticated low-privileged users to elevate their permissions to higher roles, including administrator. The flaw stems from incorrect privilege assignment (CWE-266) and carries a CVSS 8.8 with high confidentiality, integrity, and availability impact across the WordPress instance. No public exploit identified at time of analysis, and the Patchstack disclosure is the sole reference currently available.
Missing authorization in ThemeGrill User Registration through 5.3.0 allows unauthenticated remote attackers to perform limited unauthorized modifications on affected WordPress sites, with no confidentiality or availability impact. The issue is a CWE-862 broken access control flaw scored CVSS 5.3 (AV:N/AC:L/PR:N/UI:N/C:N/I:L/A:N), and the exact vulnerable feature or endpoint is not described in the available sources. No CISA KEV listing or public exploit code is identified in the supplied data, and the reported priority is this_month.
Basic cross-site scripting (XSS) in ThemeGrill User Registration through 5.3.0 allows remote attackers to inject script-related HTML/content into pages served by affected WordPress sites. Sites running the vulnerable plugin version are affected, and the independent assessment rates this medium severity (CVSS 5.3) with limited impact and no availability effect indicated. The supplied intelligence shows no confirmed active exploitation (CISA KEV) and no public exploit identified at time of analysis.
ThemeGrill's User Registration WordPress plugin (versions up to and including 5.2.8) fails to enforce authorization checks on one of its endpoints, letting a low-privilege authenticated user perform actions that should be restricted. Exploitation requires a valid session (CVSS PR:L), but because the plugin's core purpose is open self-service registration, an attacker can typically create the necessary account themselves - no user interaction is needed and the attack is remote and low-complexity. Impact is limited to integrity and availability of the affected functionality (I:L/A:L, no confidentiality impact), rated CVSS 5.4; no public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV.
WordPress sites running the ThemeGrill User Registration plugin through version 5.2.8 can be queried by unauthenticated remote attackers to retrieve embedded sensitive data, because a missing authorization check (CWE-862) leaves a data-exposing code path reachable without any privilege. Per the assessed CVSS vector (AV:N/AC:L/PR:N/UI:N), no authentication, user interaction, or non-default configuration is required, and the impact is confined to Low confidentiality with no integrity or availability effect - the attacker gains read access to specific exposed data rather than full account or site compromise. Exploitation is limited to sites that have not upgraded past 5.2.8, and there is no public exploit identified at time of analysis and no confirmation of active exploitation (not listed in CISA KEV); this is a routine patch-management item rather than an emergency.
Stored cross-site scripting in the ThemeGrill User Registration WordPress plugin (versions through 5.2.8) lets an authenticated low-privilege user - realistically anyone who can complete the plugin's own self-service sign-up form when open registration is enabled - persist malicious script into plugin-stored data that later renders in a victim's browser. The payload only fires when a higher-privileged user, typically an administrator reviewing registrations or user records, loads the affected page, so exploitation requires that human view-step and is not automatable against an idle target; CVSS is 6.5 (Medium) with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L. No confirmed active exploitation (not in CISA KEV) and no public exploit code identified at time of analysis, and because the flaw is scope-changing it can affect resources beyond the plugin's own security context.
Cross-site request forgery (CSRF) in the ThemeGrill User Registration WordPress plugin through version 5.2.8 allows remote attackers to trick a logged-in privileged user into performing unintended actions, with low integrity and availability impact (CVSS 5.4). Exploitation requires an active authenticated WordPress session and successful social engineering to load attacker-controlled content (UI:R), as reflected in the CVSS vector (PR:N, UI:R). No public exploit code or confirmed active exploitation has been identified at time of analysis, and the independent assessment rates this as a moderate-severity, low-priority issue for most defenders.
Missing access control checks in ThemeGrill's User Registration plugin for WordPress, versions through 5.2.8, let unauthenticated remote users (CVSS PR:N/UI:N) reach restricted functionality that should require higher privileges, resulting in low-impact disclosure of protected data (C:L, I:N, A:N). The issue is rated moderate at CVSS 5.3 and does not by itself enable account takeover, data modification, or code execution, so its practical value to an attacker is information gathering rather than full compromise. No public exploit code and no confirmed active exploitation (CISA KEV) have been identified at time of analysis, and the specific registration endpoint or feature that is improperly authorized is not named in the available data, so the exact exposure surface remains unscoped pending the vendor advisory.
Missing authorization in the ThemeGrill User Registration WordPress plugin, affecting all releases through 5.2.7, lets remote attackers (no authentication or user interaction required per the reported CVSS vector) invoke functionality that should be gated behind capability or role checks, with limited confidentiality, integrity, and availability impact. The reported CVSS 5.6 with AC:H reflects that successful exploitation likely depends on a specific plugin feature, role/permission configuration, or application state rather than working against every default install. No public exploit code and no confirmed active exploitation have been identified at time of analysis, and the available data does not name the precise vulnerable endpoint, so the modified/affected action must be confirmed from the Patchstack advisory.
Cross-site scripting in ThemeGrill's Magazine Blocks WordPress plugin (versions ≤1.8.6) enables an authenticated Contributor to inject malicious scripts into block content that execute in a victim's browser upon page view. The CVSS scope-change metric (S:C) reflects that injected code escapes the plugin context and runs in the victim's browser session, potentially allowing session token theft or unauthorized admin actions. No public exploit code or active exploitation has been identified at time of analysis, but the Patchstack-reported flaw and ENISA EUVD-2026-64788 entry confirm the vulnerability.
Unauthorized plugin installation in the ThemeGrill Accelerate WordPress theme (versions up to and including 1.5.3) is possible because the enqueue_scripts() function performs no WordPress capability check before triggering ThemeGrill Demo Importer plugin installation. Any user holding at least a Subscriber-level account on the affected site can exploit this to install and activate an additional plugin, expanding the attack surface. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis.
Stored Cross-Site Scripting in the Zakra WordPress theme (versions up to and including 4.2.0) allows authenticated Contributors to inject arbitrary JavaScript into site pages via the REST API. The vulnerability stems from a sanitization bypass: while the classic editor code path correctly applies sanitize_hex_color() to three menu-color post meta fields, the REST API registration omits any sanitize_callback, permitting unfiltered values to be written. Those values are later concatenated unsanitized into inline CSS and rendered on every page load, triggering stored XSS against any site visitor. No active exploitation (CISA KEV) is confirmed; a vendor-released patch is available in version 4.2.1.
Unauthenticated broken authentication in the Masteriyo LMS WordPress plugin (versions ≤2.1.8) stems from improper JWT signature verification (CWE-347), allowing remote attackers to forge authentication tokens without valid credentials and gain unauthorized access to protected LMS resources. The CVSS:3.1 vector AV:N/AC:L/PR:N/UI:N confirms fully unauthenticated, low-complexity network exploitation, enabling an attacker to impersonate enrolled students or instructors and read or modify course-related data. No public exploit code or active exploitation has been confirmed at time of analysis, and the vulnerability is not listed in CISA KEV.
Information disclosure via missing authorization in ThemeGrill Demo Importer allows unauthenticated remote attackers to access sensitive demo import data. The vulnerability affects all plugin versions up to 2.0.0.6 and requires no user interaction. No active exploitation or public exploit code has been reported, and the EPSS exploitation probability is very low (0.02%).
Authentication Bypass Using an Alternate Path or Channel vulnerability in Masteriyo Masteriyo - LMS. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
The Magazine Blocks - Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.3.2. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Esteem allows Stored XSS.5.0. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Privilege escalation in the Masteriyo LMS WordPress plugin (versions up to and including 1.7.2) allows remote unauthenticated attackers to assign themselves elevated privileges due to incorrect privilege assignment logic. With a CVSS score of 9.8 and an EPSS score of 31.54% (97th percentile), this flaw poses significant real-world risk, though no public exploit is identified at time of analysis and it is not listed in CISA KEV.
The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribe_download function hooked via AJAX action in all versions up. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.
The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email addresses of other. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.