VYPR
← All vendors
Vendor

Ithemes

Products
24
CVEs
25
Across products
28
Status
Private

Products

24

Recent CVEs

25
View all 25 CVEs →
  • CVE-2020-14092CriJul 2, 2020
    WordPress
    Payment Form For Paypal Pro
    risk 0.71cvss 9.8epss 0.95

    The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.

  • CVE-2022-31474HigMar 13, 2023
    Ithemes
    Backupbuddy
    risk 0.54cvss 7.5epss 0.64

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.

  • CVE-2018-12636HigJun 22, 2018
    Ithemes
    Security
    risk 0.52cvss 7.2epss 0.30

    The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.

  • CVE-2020-36176HigJan 6, 2021
    Ithemes
    Ithemes Security
    risk 0.49cvss 7.5epss 0.01

    The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.

  • CVE-2018-7433HigMar 2, 2018
    Ithemes
    Security
    risk 0.49cvss 7.5epss 0.01

    The iThemes Security plugin before 6.9.1 for WordPress does not properly perform data escaping for the logs page.

  • CVE-2022-4897MedFeb 21, 2023
    WordPress
    BackupBuddy
    risk 0.40cvss 6.1epss 0.01

    The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting

  • CVE-2015-9379MedAug 28, 2019
    Ithemes
    Builder Style Manager
    risk 0.40cvss 6.1epss 0.01

    iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9378MedAug 28, 2019
    Ithemes
    Builder Theme Market
    risk 0.40cvss 6.1epss 0.01

    iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9377MedAug 28, 2019
    Ithemes
    Builder Theme Depot
    risk 0.40cvss 6.1epss 0.01

    iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9376MedAug 28, 2019
    Ithemes
    Mobile
    risk 0.40cvss 6.1epss 0.01

    iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9375MedAug 28, 2019
    Ithemes
    Table Rate Shipping
    risk 0.40cvss 6.1epss 0.01

    Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9374MedAug 28, 2019
    Ithemes
    Stripe
    risk 0.40cvss 6.1epss 0.01

    Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9372MedAug 28, 2019
    Ithemes
    Membership
    risk 0.40cvss 6.1epss 0.01

    Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9371MedAug 28, 2019
    Ithemes
    Manual Purchases
    risk 0.40cvss 6.1epss 0.01

    Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9370MedAug 28, 2019
    Ithemes
    Invoices
    risk 0.40cvss 6.1epss 0.01

    Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9369MedAug 28, 2019
    Ithemes
    Easy Us Sales Taxes
    risk 0.40cvss 6.1epss 0.01

    Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9368MedAug 28, 2019
    WordPress
    Easy EU Value Added (VAT) Taxes Add-on
    risk 0.40cvss 6.1epss 0.01

    Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9367MedAug 28, 2019
    Ithemes
    Easy Canadian Sales Taxes
    risk 0.40cvss 6.1epss 0.01

    Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9366MedAug 28, 2019
    Ithemes
    Custom URL Tracking
    risk 0.40cvss 6.1epss 0.01

    Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

  • CVE-2015-9365MedAug 28, 2019
    Ithemes
    Authorize.net
    risk 0.40cvss 6.1epss 0.01

    Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().

View all 25 CVEs →