Spider Themes vulnerabilities

6 vulnerabilities

Known vulnerabilities in Spider Themes products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

Products

3
5.3CVE-2025-68572spider themesbbp core+1
EPSS score
0.25%
Missing Authorization vulnerability in Spider Themes BBP Core bbp-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BBP Core: from n/a through <= 1.4.1.
6.4CVE-2025-32216spider themesspider elements+1
EPSS score
0.28%
Missing Authorization vulnerability in Spider Themes Spider Elements spider-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spider Elements: from n/a through <= 1.6.6.
5.4CVE-2025-32221spider themeseazydocs+1
EPSS score
0.28%
Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through <= 2.7.1.
6.5CVE-2025-32182spider themesspider elements+1
EPSS score
0.40%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spider Themes Spider Elements spider-elements allows Stored XSS.This issue affects Spider Elements: from n/a through <= 1.6.5.
8.8CVE-2024-54376spider themeseazydocs+1
EPSS score
0.59%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Spider Themes EazyDocs eazydocs allows PHP Local File Inclusion.This issue affects EazyDocs: from n/a through <= 2.8.0.
7.5CVE-2023-47648spider themeseazydocs+1
EPSS score
0.53%
Missing Authorization vulnerability in Spider Themes EazyDocs eazydocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EazyDocs: from n/a through <= 2.3.5.