Spider-Themes

14 CVEs across 6 Spider-Themes products. Browse Spider-Themes vulnerabilities, severities, and proof-of-concept exploits.

Spider-Themes products with known CVEs

ProductCVEs
Eazydocs10
Spider Elements2
Bbp Core1
Bbp Core1
Eazydocs – Most Powerful Knowledge Base, Wiki, Documentation Builder Plugin (Easy Docs, Knowledgebase)1
Spider-Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-68572Medium5.32025-12-24Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2025-32221Medium5.42025-04-10Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2025-32216Medium6.42025-04-10Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.Th…
CVE-2025-32182Medium6.52025-04-04Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spider Themes Spider Elements spider-elements allows Stor…
CVE-2023-47648High7.52025-01-02Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…
CVE-2024-54376High7.52024-12-16Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Spider Themes EazyDocs eazydocs allows…
CVE-2024-9896Medium6.12024-11-02The BBP Core – Expand bbPress powered forums with useful features plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_qu…
CVE-2024-38721High7.12024-11-01Missing Authorization vulnerability in spider-themes EazyDocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDo…
CVE-2024-38720Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in EazyDocs eazydocs allows Stored XSS.This issue aff…
CVE-2024-3999Medium4.82024-07-02The EazyDocs WordPress plugin before 2.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-0248Medium4.32024-02-12The EazyDocs WordPress plugin before 2.4.0 re-introduced CVE-2023-6029 (https://wpscan.com/vulnerability/7a0aaf85-8130-4fd7-8f09-f8edc929597e/) in 2.3.8, allow…
CVE-2023-6029High7.52024-01-15The EazyDocs WordPress plugin before 2.3.6 does not have authorization and CSRF checks when handling documents and does not ensure that they are documents from…
CVE-2023-6035High8.82023-12-11The EazyDocs WordPress plugin before 2.3.4 does not properly sanitize and escape "data" parameter before using it in an SQL statement via an AJAX action, which…
CVE-2023-47549Medium6.82023-11-14Unauth. Reflected Cross-Site Scripting (XSS) vulnerability on 302 response page in spider-themes EazyDocs plugin <= 2.3.3 versions.