ithemes vulnerabilities and exploits

(subscribe to this query)

4.3

CVSSv2

iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Exchange

7.5

CVSSv2

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote attackers to obtain sensitive information, or overwrite or delete files, via vectors involving a (1) direct...

Ithemes Backupbuddy

4.3

CVSSv2

iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Builder Theme Market

7.5

CVSSv2

importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote attackers to obtain access via subsequent requests to this script....

Ithemes Backupbuddy

4.3

CVSSv2

Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Manual Purchases

4.3

CVSSv2

iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Builder Style Manager

5

CVSSv2

importbuddy.php in the BackupBuddy plugin 2.2.25 for WordPress allows remote attackers to obtain configuration information via a step 0 phpinfo action, which calls the phpinfo function....

Ithemes Backupbuddy

4.3

CVSSv2

Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Authorize.net

4.3

CVSSv2

Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Easy Us Sales Taxes

4.3

CVSSv2

Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg()....

Ithemes Table Rate Shipping

1 2 3 NEXT »