Themenectar

9 CVEs across 5 Themenectar products. Browse Themenectar vulnerabilities, severities, and proof-of-concept exploits.

Themenectar products with known CVEs

ProductCVEs
Salient Shortcodes3
Salient Core2
Salient Core2
Salient1
Salient Portfolio1
Themenectar CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-68079Medium6.52025-12-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Shortcodes salient-shortcodes allows…
CVE-2025-68078Medium6.52025-12-16Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Portfolio salient-portfolio allows St…
CVE-2025-59001Medium4.32025-12-16Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-62028Medium4.32025-11-06Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0.
CVE-2024-3812High7.52024-05-18The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_l…
CVE-2024-3811Medium6.42024-05-18The Salient Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'icon' shortcode in all versions up to, and including…
CVE-2024-3810High8.82024-05-18The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image'…
CVE-2023-48749Medium6.52023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Stored XSS.This issue af…
CVE-2023-48748High7.12023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Theme nectar Salient Core allows Reflected XSS.This issue…