Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
ithemes vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2013-2741
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not require that authentication be enabled, which allows remote malicious users to obtain sensitive information, or overwrite or delete files, via vectors involving a (1) direct r...
Ithemes Backupbuddy 2.2.4
Ithemes Backupbuddy 2.2.28
Ithemes Backupbuddy 1.3.4
Ithemes Backupbuddy 2.1.4
Ithemes Backupbuddy 2.2.25
668
VMScore
CVE-2013-2743
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress allows remote malicious users to bypass authentication via a crafted integer in the step parameter.
Ithemes Backupbuddy 2.2.4
Ithemes Backupbuddy 1.3.4
Ithemes Backupbuddy 2.1.4
Ithemes Backupbuddy 2.2.25
Ithemes Backupbuddy 2.2.28
668
VMScore
CVE-2013-2742
importbuddy.php in the BackupBuddy plugin 1.3.4, 2.1.4, 2.2.25, 2.2.28, and 2.2.4 for WordPress does not reliably delete itself after completing a restore operation, which makes it easier for remote malicious users to obtain access via subsequent requests to this script.
Ithemes Backupbuddy 1.3.4
Ithemes Backupbuddy 2.1.4
Ithemes Backupbuddy 2.2.25
Ithemes Backupbuddy 2.2.4
Ithemes Backupbuddy 2.2.28
445
VMScore
CVE-2020-36176
The iThemes Security (formerly Better WP Security) plugin prior to 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
Ithemes Ithemes Security
383
VMScore
CVE-2015-9376
iThemes Mobile prior to 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
Ithemes Mobile
NA
CVE-2022-31474
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 up to and including 8.7.4.1.
Ithemes Backupbuddy
383
VMScore
CVE-2015-9363
iThemes Exchange prior to 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Ithemes Exchange
383
VMScore
CVE-2015-9365
Authorize.net Add-on for iThemes Exchange prior to 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Ithemes Authorize.net
383
VMScore
CVE-2015-9370
Invoices Add-on for iThemes Exchange prior to 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Ithemes Invoices
383
VMScore
CVE-2015-9372
Membership Add-on for iThemes Exchange prior to 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
Ithemes Membership
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3201
CVE-2024-4779
CVE-2024-35090
CVE-2024-5084
hard-coded
CVE-2024-4985
HTML injection
CVE-2024-33655
local file inclusion
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »