Themelocation

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13362 May 01, 05:29 MEDIUM This Month

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor +166

NVD

CVSS 3.1

6.1

EPSS

0.1%

CVE-2024-1697 Mar 23, 02:15 MEDIUM This Month

The Custom WooCommerce Checkout Fields Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the save_wcfe_options function in all versions up to, and including, 1.3.1 due to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Custom Woocommerce Checkout Fields Editor Wordpress Plugin Themelocation

NVD

CVSS 3.1

6.4

EPSS

0.1%

CVE-2023-46629 Nov 13, 01:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <= 1.4.4. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Remove Add To Cart Woocommerce Themelocation

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2024-13362

EPSS 0% CVSS 6.1

MEDIUM This Month

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai +168

NVD

CVE-2024-1697

EPSS 0% CVSS 6.4

MEDIUM This Month

WordPress XSS Custom Woocommerce Checkout Fields Editor +2

NVD

CVE-2023-46629

EPSS 0% CVSS 8.8

HIGH This Week

WordPress CSRF Remove Add To Cart Woocommerce +1

NVD