Log out
Get PRO

Latest

Input validation vulnerability in multiple themes (10 themes affected)

  • Severity: medium-risk
  • Status: Fixed
  • Publication: August 14, 2023

WordPress themes make websites user friendly and attractive, but some versions of them have a security flaw. Attackers can inject malicious web scripts into pages if users click on a link that the attackers have tricked them into clicking. This is because the themes do not properly check the input or protect the output, so the malicious scripts can be executed.

Detected in:

Aapna fixed vulnerable versions: >= * <= *
Anand fixed vulnerable versions: >= * <= *
Anfaust fixed vulnerable versions: >= * <= *
Arendelle fixed vulnerable versions: >= * <= 1.1.3
Atlast Business fixed vulnerable versions: >= * <= *
Bazaar Lite fixed vulnerable versions: >= * < 1.8.6
Brain Power fixed vulnerable versions: >= * <= *
BunnyPressLite fixed vulnerable versions: >= * < 2.1
Cafe Bistro fixed vulnerable versions: >= * < 1.1.4
College fixed vulnerable versions: >= * < 1.5.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.