Login Request a demo
IT
Vendor
Ithemes
19 products with CVEs on record
25
CVEs
0
On KEV
0
New 30D
Products
BA
Backupbuddy
Ithemes
7.5
6 CVEs0 on KEV0 new
SE
Security
Ithemes
7.5
2 CVEs0 on KEV0 new
AU
Authorize.net
Ithemes
6.1
1 CVEs0 on KEV0 new
BS
Builder Style Manager
Ithemes
6.1
1 CVEs0 on KEV0 new
BT
Builder Theme Depot
Ithemes
6.1
1 CVEs0 on KEV0 new
BT
Builder Theme Market
Ithemes
6.1
1 CVEs0 on KEV0 new
CU
Custom Url Tracking
Ithemes
6.1
1 CVEs0 on KEV0 new
EC
Easy Canadian Sales Taxes
Ithemes
6.1
1 CVEs0 on KEV0 new
EE
Easy EU Value Added (vat) Taxes
Ithemes
6.1
1 CVEs0 on KEV0 new
EU
Easy US Sales Taxes
Ithemes
6.1
1 CVEs0 on KEV0 new
EX
Exchange
Ithemes
6.1
1 CVEs0 on KEV0 new
IN
Invoices
Ithemes
6.1
1 CVEs0 on KEV0 new
IS
Ithemes Security
Ithemes
7.5
1 CVEs0 on KEV0 new
MP
Manual Purchases
Ithemes
6.1
1 CVEs0 on KEV0 new
ME
Membership
Ithemes
6.1
1 CVEs0 on KEV0 new
MO
Mobile
Ithemes
6.1
1 CVEs0 on KEV0 new
PP
Paypal Pro
Ithemes
9.8
1 CVEs0 on KEV0 new
ST
Stripe
Ithemes
6.1
1 CVEs0 on KEV0 new
TR
Table Rate Shipping
Ithemes
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2022-31474
BA
Backupbuddy
Ithemes
7.5
64%
Mar 13Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from…
CVE-2022-4897
BA
Backupbuddy
Ithemes
6.1
1%
Feb 21The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting
CVE-2020-36176
IS
Ithemes Security
Ithemes
7.5
1%
Jan 6The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login…
CVE-2020-14092
PP
Paypal Pro
Ithemes
9.8
95%
Jul 2The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection
CVE-2015-9379
BS
Builder Style Manager
Ithemes
6.1
1%
Aug 28iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9378
BT
Builder Theme Market
Ithemes
6.1
1%
Aug 28iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9377
BT
Builder Theme Depot
Ithemes
6.1
1%
Aug 28iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9376
MO
Mobile
Ithemes
6.1
1%
Aug 28iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9375
TR
Table Rate Shipping
Ithemes
6.1
1%
Aug 28Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9374
ST
Stripe
Ithemes
6.1
1%
Aug 28Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9372
ME
Membership
Ithemes
6.1
1%
Aug 28Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9371
MP
Manual Purchases
Ithemes
6.1
1%
Aug 28Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9370
IN
Invoices
Ithemes
6.1
1%
Aug 28Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9369
EU
Easy US Sales Taxes
Ithemes
6.1
1%
Aug 28Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9368
EE
Easy EU Value Added (vat) Taxes
Ithemes
6.1
1%
Aug 28Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9367
EC
Easy Canadian Sales Taxes
Ithemes
6.1
1%
Aug 28Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9366
CU
Custom Url Tracking
Ithemes
6.1
1%
Aug 28Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9365
AU
Authorize.net
Ithemes
6.1
1%
Aug 28Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2015-9363
EX
Exchange
Ithemes
6.1
1%
Aug 28iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg()
CVE-2018-12636
SE
Security
Ithemes
7.2
30%
Jun 22The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page
CVE-2018-7433
SE
Security
Ithemes
7.5
1%
Mar 2The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page
CVE-2013-2744
BA
Backupbuddy
Ithemes
–
2%
Apr 2importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo…
CVE-2013-2743
BA
Backupbuddy
Ithemes
–
3%
Apr 2importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote attackers to bypass authentication via a crafted integer in the step…
CVE-2013-2742
BA
Backupbuddy
Ithemes
–
2%
Apr 2importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes…
CVE-2013-2741
BA
Backupbuddy
Ithemes
–
3%
Apr 2importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to…