Dream-theme The7 vulnerabilities
- dream-theme the7 — website and ecommerce builder for wordpress The7 <= 14.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 'link' Parameter 6.4 Medium
- dream-theme the7 elements WordPress The7 Elements plugin <= 2.7.11 - Local File Inclusion vulnerability 7.5 High
- dream-theme the7 WordPress The7 theme < 12.8.1.1 - Local File Inclusion vulnerability 7.5 High
- dream-theme the7 WordPress The7 theme < 12.9.0 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
- dream-theme the7 — website and ecommerce builder for wordpress The7 — Ultimate WordPress & WooCommerce Theme <= 12.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'the7_fancy_title_css' 6.4 Medium
- dream-theme the7 — website and ecommerce builder for wordpress The7 <= 12.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title and data-dt-img-description Attributes 6.4 Medium
- dream-theme the7 — website and ecommerce builder for wordpress The7 — Website and eCommerce Builder for WordPress <= 11.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Attribute 6.4 Medium
- dream-theme the7 WordPress The7 Theme <= 11.7.3 is vulnerable to Cross Site Request Forgery (CSRF) 6.1 Medium
- dream-theme the7 WordPress The7 Theme <= 11.6.0 is vulnerable to Cross Site Scripting (XSS) 7.1 High