Wpweaver vulnerabilities

Products

• Weaver Show Posts 3
• Turnkey Bbpress By Weavertheme 2
• Weaver Xtreme 2
• Weaver Xtreme Theme Support 2

Newest

• unknown weaver xtreme theme support WordPress Weaver Xtreme theme Support plugin <= 7.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-54870 6.5 MediumOctober 13, 2026
• unknown weaver show posts Weaver Show Posts < 1.8.1 - Admin+ PHP Object Injection CVE-2023-3360 3.3 LowSeptember 2, 2026
• wpweaver turnkey bbpress by weavertheme Turnkey bbPress by WeaverTheme <= 1.7.1 - Authenticated (Administrator+) PHP Object Injection CVE-2026-10035 6.6 MediumAugust 16, 2026
• wpweaver weaver show posts Weaver Show Posts <= 1.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Additional Classes to Wrap Posts' Widget Setting CVE-2026-2121 4.4 MediumMarch 21, 2026
• bruce wampler weaver themes shortcode compatibility WordPress Weaver Themes Shortcode Compatibility Plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-22267 6.5 MediumJanuary 21, 2025
• wpweaver turnkey bbpress by weavertheme Turnkey bbPress by WeaverTheme <= 1.6.3 - Reflected Cross-Site Scripting via _wpnonce Parameter CVE-2024-12221 6.1 MediumJanuary 4, 2025
• unknown weaver xtreme theme support Weaver Xtreme Theme Support <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via div Shortcode CVE-2024-4939 6.4 MediumJune 5, 2024
• wpweaver weaver xtreme, weavertheme weaver xtreme theme support +1 more Weaver Xtreme <= 6.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2023-6990 5.4 MediumJanuary 11, 2024
• weavertheme weaver show posts Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name CVE-2023-1404 6.4 MediumJune 9, 2023
• weavertheme weaver xtreme theme, wpweaver weaver xtreme +1 more Weaver Xtreme Theme <= 5.0.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name CVE-2023-1403 6.4 MediumJune 9, 2023