Themeisle Lightstart – Maintenance Mode, Coming Soon And Landing Page Builder vulnerabilities

2 vulnerabilities

Known vulnerabilities in Themeisle Lightstart – Maintenance Mode, Coming Soon And Landing Page Builder, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2024-1047optimoleoptimole – optimize images in real time+24
EPSS score
0.56%
Multiple plugins and/or themes for WordPress with the ThemeIsle SDK are vulnerable to unauthorized modification of data due to a missing capability check on the register_reference() function in various versions. This makes it possible for unauthenticated attackers to update options values that allow ThemeIsle to track promotional activities via utm_source.4.3CVE-2023-7019themeislelightstart+2
EPSS score
0.32%
The LightStart – Maintenance Mode, Coming Soon and Landing Page Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the insert_template function in all versions up to, and including, 2.6.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to change page designs.