Webriti vulnerabilities

Products

• Appointment Dark 1
• Busiprof 1
• ElitePress 1
• Heroic 1
• Leo 1
• Mazino 1
• Quality 1
• Rambo 1
• Shk Corporate 1
• Spasalon 1
• vdequator 1
• vdperanto 1
• vice 1
• Wallstreet 1
• Wallstreet Agency 1
• webriti smtp mail 1

Latest Webriti CVEs

Newest publication first

1. CVE-2026-125838 WordPress Quality theme <= 3.3 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Quality quality allows Cross Site Request Forgery.This issue affects Quality: from n/a through 3.3.

2. CVE-2026-125839 WordPress ElitePress theme <= 3.2.1 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti ElitePress elitepress allows Cross Site Request Forgery.This issue affects ElitePress: from n/a through 3.2.1.

3. CVE-2026-125840 WordPress Rambo theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Rambo rambo allows Cross Site Request Forgery.This issue affects Rambo: from n/a through 3.0.

4. CVE-2026-125841 WordPress Heroic theme <= 1.4.2 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Heroic heroic allows Cross Site Request Forgery.This issue affects Heroic: from n/a through 1.4.2.

5. CVE-2026-125842 WordPress Wallstreet Agency theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Wallstreet Agency wallstreet-agency allows Cross Site Request Forgery.This issue affects Wallstreet Agency: from n/a through 1.3.4.

6. CVE-2026-125843 WordPress Spasalon theme <= 3.0 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Spasalon spasalon allows Cross Site Request Forgery.This issue affects Spasalon: from n/a through 3.0.

7. CVE-2026-125844 WordPress vice theme <= 1.4 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti vice vice allows Cross Site Request Forgery.This issue affects vice: from n/a through 1.4.

8. CVE-2026-125845 WordPress vdequator theme <= 1.2.7 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.19%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti vdequator vdequator allows Cross Site Request Forgery.This issue affects vdequator: from n/a through 1.2.7.

9. CVE-2026-125846 WordPress Mazino theme <= 1.1 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2026-11-11

   High·CVSS 8.8 EPSS 0.19%

   Cross-Site Request Forgery (CSRF) vulnerability in webriti Mazino mazino allows Cross Site Request Forgery.This issue affects Mazino: from n/a through 1.1.

10. CVE-2026-125847 WordPress vdperanto theme <= 2.2 - Cross Site Request Forgery (CSRF) vulnerability

    Published 2026-11-11

    High·CVSS 8.8 EPSS 0.19%

    Cross-Site Request Forgery (CSRF) vulnerability in webriti vdperanto vdperanto allows Cross Site Request Forgery.This issue affects vdperanto: from n/a through 2.2.

11. CVE-2026-125848 WordPress Leo theme <= 1.7.4 - Cross Site Request Forgery (CSRF) vulnerability

    Published 2026-11-11

    High·CVSS 8.8 EPSS 0.19%

    Cross-Site Request Forgery (CSRF) vulnerability in webriti Leo leo allows Cross Site Request Forgery.This issue affects Leo: from n/a through 1.7.4.

12. CVE-2026-125849 WordPress Shk Corporate theme <= 2.4.3 - Cross Site Request Forgery (CSRF) vulnerability

    Published 2026-11-11

    High·CVSS 8.8 EPSS 0.19%

    Cross-Site Request Forgery (CSRF) vulnerability in webriti Shk Corporate shk-corporate allows Cross Site Request Forgery.This issue affects Shk Corporate: from n/a through 2.4.3.

13. CVE-2026-125850 WordPress Appointment Dark theme <= 1.3.4 - Cross Site Request Forgery (CSRF) vulnerability

    Published 2026-11-11

    High·CVSS 8.8 EPSS 0.20%

    Cross-Site Request Forgery (CSRF) vulnerability in webriti Appointment Dark appointment-dark allows Cross Site Request Forgery.This issue affects Appointment Dark: from n/a through 1.3.4.

14. CVE-2026-39718 WordPress Wallstreet theme <= 2.8.6 - Cross Site Request Forgery (CSRF) vulnerability

    Published 2026-10-02

    High·CVSS 8.8 EPSS 0.14%

    Cross-Site Request Forgery (CSRF) vulnerability in Webriti Wallstreet wallstreet allows Cross Site Request Forgery.This issue affects Wallstreet: from n/a through 2.8.6.

15. CVE-2024-43262 WordPress Busiprof theme <= 2.4.8 - Cross Site Scripting (XSS) vulnerability

    Published 2024-08-18

    Medium·CVSS 6.5 EPSS 0.25%

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in webriti Busiprof allows Stored XSS.This issue affects Busiprof: from n/a through 2.4.8.

16. CVE-2022-1612 Webriti SMTP Mail <= 1.0 - Arbitrary Settings Update via CSRF

    Published 2022-06-13

    Medium·CVSS 6.5 EPSS 0.54%

    The Webriti SMTP Mail WordPress plugin through 1.0 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.