Filtered by vendor Themegrill
Subscriptions
Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-0679 | 1 Themegrill | 1 Colormag | 2024-01-26 | 6.5 Medium |
The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and including, 3.1.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to install and activate arbitrary plugins. | ||||
CVE-2020-36333 | 1 Themegrill | 1 Themegrill Demo Importer | 2021-05-11 | 9.1 Critical |
themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook. | ||||
CVE-2020-36334 | 1 Themegrill | 1 Themegrill Demo Importer | 2021-05-11 | 8.8 High |
themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database. |
Page 1 of 1.