Spicethemes Spice Starter Sites vulnerabilities

2 vulnerabilities

Known vulnerabilities in Spicethemes Spice Starter Sites, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.1HighCVE-2024-44003spicethemes · spice_starter_sites +1 moreWordPress Spice Starter Sites plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through <= 1.2.5.EPSS0.27%5.3MediumCVE-2024-8430spicethemes · spice_starter_sites +1 moreSpice Starter Sites <= 1.2.5 - Missing Authorization to Unauthenticated Demo Content ImportThe Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.EPSS0.33%