Themepunch OHG vulnerabilities
7 vulnerabilities
Known vulnerabilities in Themepunch OHG products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Slider Revolution5 vulnerabilities
- Essential Grid2 vulnerabilities
RoutineCVE-2024-37449themepunch ohg · slider revolution +2 moreWordPress Slider Revolution plugin <= 6.7.13 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.7.13.CVSS5.9MediumEPSS0.26%RoutineCVE-2024-34444themepunch ohg · slider revolution +2 moreWordPress Slider Revolution plugin < 6.7.0 - Unauthenticated Broken Access Control vulnerabilityMissing Authorization vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a before 6.7.0.CVSS8.8HighEPSS0.33%RoutineCVE-2024-34443themepunch ohg · slider revolution +2 moreWordPress Slider Revolution plugin < 6.7.11 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemePunch OHG Slider Revolution allows Stored XSS.This issue affects Slider Revolution: from n/a before 6.7.11.CVSS6.4MediumEPSS0.28%RoutineCVE-2023-47771themepunch ohg · essential grid +1 moreWordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerabilityMissing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18.CVSS8.3HighEPSS0.36%RoutineCVE-2023-47784themepunch ohg · slider revolution +2 moreWordPress Slider Revolution Plugin <= 6.6.15 is vulnerable to Arbitrary File UploadUnrestricted Upload of File with Dangerous Type vulnerability in ThemePunch OHG Slider Revolution.This issue affects Slider Revolution: from n/a through 6.6.15.CVSS8.8HighEPSS0.69%RoutineCVE-2023-47772themepunch ohg · slider revolution +2 moreWordPress Slider Revolution Plugin <= 6.6.14 is vulnerable to Cross Site Scripting (XSS)Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14.CVSS6.5MediumEPSS0.39%RoutineCVE-2023-47684themepunch ohg · essential grid +2 moreWordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions.CVSS7.1HighEPSS0.84%