xplodedthemes vulnerabilities
10 published CVEs name xplodedthemes among the affected products.
- 10Published CVEs10 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124251
WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerability
XplodedThemes · WPIDE – File Manager & Code Editor
High8.8 - CVE-2026-66440
WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.7 - Cross Site Scripting (XSS) vulnerability
XplodedThemes · WPIDE – File Manager & Code Editor
High7.1 - CVE-2026-57766
WordPress WPIDE – File Manager & Code Editor plugin <= 3.5.6 - Cross Site Request Forgery (CSRF) vulnerability
XplodedThemes · WPIDE – File Manager & Code Editor
High8.8 - CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2024-9178
XT Floating Cart for WooCommerce <= 2.8.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
xplodedthemes · XT Floating Cart for WooCommerce
Medium6.4 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
xplodedthemes · WPIDE – File Manager & Code Editor
Medium5.3 - CVE-2024-8716
XT Ajax Add To Cart for WooCommerce <= 1.1.2 - Reflected Cross-Site Scripting
xplodedthemes · XT Ajax Add To Cart for WooCommerce
Medium6.1 - CVE-2022-40217
WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Edit/Upload vulnerability
XplodedThemes · WPIDE – File Manager & Code Editor (WordPress plugin)
Medium6.5 - CVE-2022-35235
WordPress WPide plugin <= 2.6 - Authenticated Arbitrary File Read vulnerability
XplodedThemes · WPIDE – File Manager & Code Editor (WordPress plugin)
Medium4.9