Weavertheme Weaver Xtreme Theme Support — known CVE vulnerabilities

Every CVE whose affected-product data names Weavertheme Weaver Xtreme Theme Support, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2023-4971 — CVSS 7.2 (high): The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object…
• CVE-2024-4939 — CVSS 6.4 (medium): The Weaver Xtreme Theme Support plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's div shortcode in all…
• CVE-2023-0276 — CVSS 5.4 (medium): The Weaver Xtreme Theme Support WordPress plugin before 6.2.7 does not validate and escape some of its shortcode attributes before…
• CVE-2023-6990 — CVSS 5.4 (medium): The Weaver Xtreme theme for WordPress is vulnerable to Stored Cross-Site Scripting via custom post meta in all versions up to, and…