HighCVSS 7.1
EPSS 0.25%
Unauthenticated Cross Site Scripting (XSS) in Automotive Car Dealership Business <= 13.3.3 versions.
Vendor
Themesuite vulnerabilities
5 published CVES affecting Themesuite, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 5
- Critical
- 1
- High
- 2
- Medium
- 2
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Products
- Automotive Car Dealership Business WordPress Theme 2
- Automotive Listings 2
- Automotive Car Dealership Business 1
Latest Themesuite CVEs
Newest publication first
-
-
HighCVSS 7.1 EPSS 0.25%
Unauthenticated Cross Site Scripting (XSS) in Automotive Listings <= 18.6 versions.
-
MediumCVSS 6.4 EPSS 0.16%
The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Project Details' custom field in Portfolio Items in all versions up to, and including, 13.4.1. This is due to insufficient input sanitization and output esca...
-
MediumCVSS 6.4 EPSS 0.30%
The Automotive Car Dealership Business WordPress Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Call to Action' custom fields in all versions up to, and including, 13.4. This is due to insufficient input sanitization and output escaping on user-supplied...
-
CriticalCVSS 9.3 EPSS 0.34%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in themesuite Automotive Listings automotive allows Blind SQL Injection.This issue affects Automotive Listings: from n/a through <= 18.6.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.