PatchTheCVEthemepunch vulnerabilities
Recent CVEs affecting themepunch products. 9 tracked.
themepunch has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-10-01. Highest priority: CVE-2023-6528 (score 54/100).
- CVE-2024-8107 MEDIUM 6.4 UPGRADE The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads i
- CVE-2024-4092 MEDIUM 6.4 UPGRADE The Slider Revolution plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘htmltag’ para
- CVE-2024-37449 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2024-34444 HIGH 7.1 UPGRADE Missing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution:
- CVE-2024-34443 MEDIUM 5.9 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in T
- CVE-2023-6528 HIGH 8.8 UPGRADE The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from
- CVE-2023-47784 HIGH 8.4 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue a
- CVE-2023-47772 MEDIUM 6.5 UPGRADE Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14.
- CVE-2023-47684 HIGH 7.1 UPGRADE Unauth
FAQ
How do I fix themepunch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is themepunch being exploited right now?
None of the tracked themepunch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which themepunch CVE should I patch first?
CVE-2023-6528 currently ranks highest (54/100): The Slider Revolution WordPress plugin before 6.6.19 does not prevent users with at least the Author role from.