themehunk Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Lead Form Builder & Contact Form4 vulnerabilities
Contact Form & Lead Form Elementor Builder3 vulnerabilities
Vayu Blocks – Website Builder for the Block Editor3 vulnerabilities
Advance WordPress Search Plugin2 vulnerabilities
advanced_wordpress_search2 vulnerabilities
Big Store2 vulnerabilities
Easy Mega Menu for WordPress – ThemeHunk2 vulnerabilities
Gutenberg Blocks2 vulnerabilities
Hunk Companion Plugin2 vulnerabilities
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce2 vulnerabilities
Advance Product Search1 vulnerability
Advance Product Search- Voice & Ajax Search for WooCommerce1 vulnerability
Hunk Companion1 vulnerability
hunk_companion1 vulnerability
Oneline Lite1 vulnerability
Open Shop1 vulnerability
TH Login Registration1 vulnerability
Th Shop Mania1 vulnerability
TH Variation Swatches1 vulnerability
th_shop_mania1 vulnerability
ThemeHunk1 vulnerability
Top Store1 vulnerability
top_store1 vulnerability
Variation Swatches for WooCommerce1 vulnerability
Wishlist for WooCommerce1 vulnerability

themehunk vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2025-30881MEDIUM	WordPress Big Store theme <= 2.0.8 - Broken Access Control vulnerability Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a through <= 2.0.8. CWE-862Mar 27, 2025	CVSS4.3v3.1	EPSS0.335%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-27431MEDIUM	WordPress Big Store Theme <= 1.9.3 is vulnerable to Cross Site Request Forgery (CSRF) Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions. CWE-352Nov 12, 2023	CVSS4.3v3.1	EPSS0.312%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX