ThemeGrill Vulnerabilities and Affected Products
Vulnerabilities associated with Himalayas.
Products
Clear product- ColorMag3 vulnerabilities
- Masteriyo - LMS3 vulnerabilities
- Himalayas2 vulnerabilities
- Maintenance Page2 vulnerabilities
- ThemeGrill Demo Importer2 vulnerabilities
- themegrill_demo_importer2 vulnerabilities
- User Registration2 vulnerabilities
- User Registration Stripe2 vulnerabilities
- Zakra2 vulnerabilities
- Accelerate1 vulnerability
- ColorNews1 vulnerability
- Esteem1 vulnerability
- maintenance_page1 vulnerability
- Registration Form for WooCommerce1 vulnerability
- Spacious1 vulnerability
- ThemeGrill Demo Importer plugin for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-39629MEDIUM | WordPress Himalayas theme <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.2. CWE-79Aug 1, 2024 | CVSS5.9v3.1 | EPSS0.26% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-34571MEDIUM | WordPress Himalayas theme <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas: from n/a through 1.3.0. CWE-79May 8, 2024 | CVSS6.5v3.1 | EPSS0.255% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |