ThemePunch OHG Vulnerabilities and Affected Products
Vulnerabilities associated with Essential Grid.
Products
Clear product- Slider Revolution5 vulnerabilities
- Essential Grid2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-47771HIGH | WordPress Essential Grid plugin <= 3.0.18 - Multiple Authenticated Broken Access Control vulnerabilityMissing Authorization vulnerability in ThemePunch OHG Essential Grid.This issue affects Essential Grid: from n/a through 3.0.18. CWE-862Jun 19, 2024 | CVSS8.3v3.1 | EPSS0.356% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-47684HIGH | WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ThemePunch OHG Essential Grid plugin <= 3.1.0 versions. | CVSS7.1v3.1 | EPSS0.838% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |