Wpweaver
7 CVEs across 5 Wpweaver products. Browse Wpweaver vulnerabilities, severities, and proof-of-concept exploits.
Wpweaver products with known CVEs
Wpweaver CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-2121 | Medium | 4.4 | 2026-03-21 | The Weaver Show Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_class' parameter in all versions up to, and including, 1.8… |
CVE-2025-22267 | Medium | 6.5 | 2025-01-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpweaver Weaver Themes Shortcode Compatibility weaver-the… |
CVE-2024-12221 | Medium | 6.1 | 2025-01-04 | The Turnkey bbPress by WeaverTheme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘_wpnonce’ parameter in all versions up to, and… |
CVE-2024-4939 | Medium | 6.4 | 2024-06-05 | The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all versions up to, and inc… |
CVE-2023-6990 | Medium | 5.4 | 2024-01-11 | The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and including, 6.3.0 due to insu… |
CVE-2023-1404 | Medium | 6.4 | 2023-06-09 | The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up… |
CVE-2023-1403 | Medium | 6.4 | 2023-06-09 | The Weaver Xtreme Theme for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to… |