VendorsaThemessydney_toolboxall versions
Vulnerabilities

aThemes Sydney Toolbox

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2024-4036
Sydney Toolbox <= 1.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-05-02 · Modified
6.4EPSS 0.006
CVE-2024-1447
Sydney Toolbox <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-02-20 · Modified
6.4EPSS 0.004
CVE-2024-3208
Sydney Toolbox <= 1.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Filterable Gallery
Published 2024-04-09 · Modified
6.4EPSS 0.004
CVE-2024-2936
Sydney Toolbox <= 1.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via _id
Published 2024-03-29 · Modified
6.4EPSS 0.003
CVE-2024-4473
Sydney Toolbox <= 1.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via aThemes: Portfolio Widget
Published 2024-05-14 · Modified
6.4EPSS 0.003