Vulnerabilities > Inkthemes > Colorway

DATE CVE VULNERABILITY TITLE RISK
2023-05-22 CVE-2023-25447 Unspecified vulnerability in Inkthemes Colorway
Cross-Site Request Forgery (CSRF) vulnerability in Inkthemescom ColorWay theme <= 4.2.3 versions.
network
low complexity
inkthemes
8.8
2019-09-16 CVE-2016-10961 Cross-site Scripting vulnerability in Inkthemes Colorway
The colorway theme before 3.4.2 for WordPress has XSS via the contactName parameter.
network
low complexity
inkthemes CWE-79
6.1