Vulnerabilities > Ithemes

DATE CVE VULNERABILITY TITLE RISK
2021-01-06 CVE-2020-36176 Incorrect Authorization vulnerability in Ithemes Security
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
network
low complexity
ithemes CWE-863
5.0
2020-07-02 CVE-2020-14092 SQL Injection vulnerability in Ithemes Paypal PRO
The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.
network
low complexity
ithemes CWE-89
7.5
2019-08-28 CVE-2015-9379 Cross-Site Scripting vulnerability in Ithemes Builder Style Manager
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9378 Cross-Site Scripting vulnerability in Ithemes Builder Theme Market
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9377 Cross-Site Scripting vulnerability in Ithemes Builder Theme Depot
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9376 Cross-Site Scripting vulnerability in Ithemes Mobile
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9375 Cross-Site Scripting vulnerability in Ithemes Table Rate Shipping
Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9374 Cross-Site Scripting vulnerability in Ithemes Stripe
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9372 Cross-Site Scripting vulnerability in Ithemes Membership
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3
2019-08-28 CVE-2015-9371 Cross-Site Scripting vulnerability in Ithemes Manual Purchases
Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
network
ithemes CWE-79
4.3