Skip to content

Machothemes vulnerabilities

Products

Newest

machothemes image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid <= 3.6.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-6261 6.4 MediumFebruary 27, 2025
machothemes image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.6.0 - Contributor+ Stored XSS CVE-2024-3710 6.8 MediumJuly 13, 2024
machothemes cpo companion WordPress CPO Companion plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-33916 6.5 MediumMay 3, 2024
colorlib activello, newspaper x, cpothemes brilliance +12 more +14 more Epsilon Framework Themes (Various Versions) - Unauthenticated Plugin Activation/Deactivation CVE-2020-36721 6.5 MediumJune 7, 2023
colorlib activello, bonkers, illdy +14 more +16 more Epsilon Framework Themes (Various Versions) - Function Injection CVE-2020-36708 Public exploit EPSS 65.3% 9.8 CriticalJune 7, 2023
macho themes newsmag WordPress Newsmag Theme <= 2.4.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28493 6.5 MediumMay 8, 2023
macho themes regina lite WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27619 5.4 MediumApril 25, 2023
machothemes strong testimonials Strong Testimonials < 3.0.3 - Contributor+ Stored XSS via Shortcode CVE-2022-4717 5.4 MediumFebruary 6, 2023
machothemes cpo companion CPO Companion < 1.1.0 - Contributor+ Stored XSS via Shortcode CVE-2022-4837 5.4 MediumJanuary 30, 2023
machothemes cpo companion CPO Companion <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting CVE-2023-0162 5.5 MediumJanuary 10, 2023
machothemes image photo gallery final tiles grid Image Photo Gallery Final Tiles Grid < 3.5.3 - Contributor+ Stored Cross-Site Scripting CVE-2022-0186 5.4 MediumFebruary 21, 2022
machothemes image photo gallery final tiles grid Multiple XSS vulnerabilities in the Final Tiles Gallery plugin before 3.4.19 for WordPress allow... CVE-2020-14962 5.4 MediumJune 21, 2020