MA
Vendor
machothemes
20
CVEs
0
On KEV
0
New 30D
Products
IP6.8
Image Photo Gallery Final Tiles Grid
Machothemes
4 CVEs0 on KEV0 new
CC6.5
CPO Companion
MachoThemes
3 CVEs0 on KEV0 new
NE9.8
NewsMag
machothemes
3 CVEs0 on KEV0 new
RL9.8
Regina Lite
machothemes
3 CVEs0 on KEV0 new
AN9.8
Antreas
machothemes
2 CVEs0 on KEV0 new
ML9.8
MedZone Lite
machothemes
2 CVEs0 on KEV0 new
NL9.8
NatureMag Lite
machothemes
2 CVEs0 on KEV0 new
ST5.4
Strong Testimonials
Machothemes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-6261 | IP Image Photo Gallery Final Tiles Grid Machothemes | 5.4 | Feb 27 | Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting |
| CVE-2024-3710 | IP Image Photo Gallery Final Tiles Grid Machothemes | 6.8 | Jul 13 | Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS |
| CVE-2024-33916 | CC CPO Companion MachoThemes | 6.5 | May 3 | WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2020-36721 | NL Naturemag Lite Machothemes | 6.5 | Jun 7 | Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation |
| CVE-2020-36708 | NE NewsMag machothemes | 9.8 | Jun 7 | Epsilon Framework Themes (Various Versions) - Function Injection |
| CVE-2023-28493 | NE Newsmag Machothemes | 5.4 | May 8 | WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-27619 | RL Regina Lite Machothemes | 5.4 | Apr 25 | WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2022-4717 | ST Strong Testimonials Machothemes | 5.4 | Feb 6 | Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode |
| CVE-2022-4837 | CC Cpo Companion Machothemes | 5.4 | Jan 30 | CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode |
| CVE-2023-0162 | CC Cpo Companion Machothemes | 4.8 | Jan 10 | CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting |
| CVE-2022-0186 | IP Image Photo Gallery Final Tiles Grid Machothemes | 5.4 | Feb 21 | The Image Photo Gallery Final Tiles Grid WordPress plugin before 3.5.3 does not sanitise and escape the Description field when editing a gallery, allowing users with a role as low… |
| CVE-2020-14962 | IP Image Photo Gallery Final Tiles Grid Machothemes | 5.4 | Jun 22 | Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Title (aka… |