Weavertheme

6 CVEs across 3 Weavertheme products. Browse Weavertheme vulnerabilities, severities, and proof-of-concept exploits.

Weavertheme products with known CVEs

ProductCVEs
Weaver Xtreme Theme Support4
Weaver Show Posts1
Weaver Xtreme Theme1
Weavertheme CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-4939Medium6.42024-06-05The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and inc…
CVE-2023-6990Medium5.42024-01-11The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 due to insu…
CVE-2023-4971High7.22023-10-16The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues wh…
CVE-2023-1404Medium6.42023-06-09The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up…
CVE-2023-1403Medium6.42023-06-09The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to…
CVE-2023-0276Medium5.42023-04-24The Weaver Xtreme Theme Support WordPress plugin before 6.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a pa…