PatchTheCVEboostifythemes vulnerabilities
Recent CVEs affecting boostifythemes products. 3 tracked.
boostifythemes has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-05-24. Highest priority: CVE-2021-24314 (score 64/100).
- CVE-2021-24314 CRITICAL 9.8 UPGRADE The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its l
- CVE-2021-24297 MEDIUM 6.1 UPGRADE The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filt
- CVE-2021-24235 MEDIUM 6.1 UPGRADE The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour Li
FAQ
How do I fix boostifythemes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is boostifythemes being exploited right now?
None of the tracked boostifythemes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which boostifythemes CVE should I patch first?
CVE-2021-24314 currently ranks highest (64/100): The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its l.