Themeisle Hestia vulnerabilities

2 vulnerabilities

Known vulnerabilities in Themeisle Hestia, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2025-53986themeislehestia+1
EPSS score
0.31%
Missing Authorization vulnerability in themeisle Hestia hestia allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hestia: from n/a through <= 3.2.10.4.3CVE-2024-37467themeislehestia+1
EPSS score
0.20%
Cross-Site Request Forgery (CSRF) vulnerability in themeisle Hestia hestia allows Cross Site Request Forgery.This issue affects Hestia: from n/a through <= 3.1.2.