2code Himer
6 CVEs affecting 2code Himer. Latest disclosed: 2024-08-05. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2232 | High | 8.1 | 2024-08-05 | The lacks CSRF checks allowing a user to invite any user to any group (including private groups) |
CVE-2024-2231 | Medium | 6.5 | 2024-07-03 | The allows any authenticated user to join a private group due to a missing authorization check on a function |
CVE-2024-2234 | Medium | 5.4 | 2024-07-03 | The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to pe… |
CVE-2024-2235 | Medium | 4.3 | 2024-07-03 | The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those t… |
CVE-2024-2233 | Medium | 4.3 | 2024-07-03 | The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions v… |
CVE-2024-2040 | Medium | 4.3 | 2024-07-03 | The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack |