← Back

Ithemes

ithemes

25 CVEs • 19 products

Products (19)

Click to collapse
Toggle
Backupbuddy
backupbuddy
6 CVEs
Security
security
2 CVEs
Exchange
exchange
1 CVE
Authorize.net
authorize.net
1 CVE
Custom Url Tracking
custom_url_tracking
1 CVE
Easy Canadian Sales Taxes
easy_canadian_sales_taxes
1 CVE
Easy Eu Value Added (vat) Taxes
easy_eu_value_added_(vat)_taxes
1 CVE
Easy Us Sales Taxes
easy_us_sales_taxes
1 CVE
Invoices
invoices
1 CVE
Manual Purchases
manual_purchases
1 CVE
Membership
membership
1 CVE
Stripe
stripe
1 CVE
Table Rate Shipping
table_rate_shipping
1 CVE
Mobile
mobile
1 CVE
Builder Theme Depot
builder_theme_depot
1 CVE
Builder Theme Market
builder_theme_market
1 CVE
Builder Style Manager
builder_style_manager
1 CVE
Paypal Pro
paypal_pro
1 CVE
Ithemes Security
ithemes_security
1 CVE

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-31474
1Ithemes
1Backupbuddy
Jun 17, 2026
Mar 13, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue affects BackupBuddy: from 8.5.8.0 through 8.7.4.1.
CVE-2022-4897
1Ithemes
1Backupbuddy
Jun 17, 2026
Feb 21, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting
CVE-2020-36176
1Ithemes
1Ithemes Security
Jun 17, 2026
Jan 6, 2021
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The iThemes Security (formerly Better WP Security) plugin before 7.7.0 for WordPress does not enforce a new-password requirement for an existing account until the second login occurs.
CVE-2020-14092
1Ithemes
1Paypal Pro
Jun 17, 2026
Jul 2, 2020
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.
CVE-2015-9379
1Ithemes
1Builder Style Manager
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iThemes Builder Style Manager before 0.7.7 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9378
1Ithemes
1Builder Theme Market
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iThemes Builder Theme Market before 5.1.27 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9377
1Ithemes
1Builder Theme Depot
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iThemes Builder Theme Depot before 5.0.30 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9376
1Ithemes
1Mobile
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iThemes Mobile before 1.2.8 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9375
1Ithemes
1Table Rate Shipping
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Table Rate Shipping Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9374
1Ithemes
1Stripe
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Stripe Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9372
1Ithemes
1Membership
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Membership Add-on for iThemes Exchange before 1.3.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9371
1Ithemes
1Manual Purchases
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Manual Purchases Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9370
1Ithemes
1Invoices
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Invoices Add-on for iThemes Exchange before 1.4.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9369
1Ithemes
1Easy Us Sales Taxes
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Easy US Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9368
1Ithemes
1Easy Eu Value Added (vat) Taxes
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Easy EU Value Added (VAT) Taxes Add-on for iThemes Exchange before 1.2.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9367
1Ithemes
1Easy Canadian Sales Taxes
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Easy Canadian Sales Taxes Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9366
1Ithemes
1Custom Url Tracking
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Custom URL Tracking Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9365
1Ithemes
1Authorize.net
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Authorize.net Add-on for iThemes Exchange before 1.1.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2015-9363
1Ithemes
1Exchange
Nov 21, 2024
Aug 28, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
iThemes Exchange before 1.12.0 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVE-2018-12636
1Ithemes
1Security
Nov 21, 2024
Jun 22, 2018
N/A· v4
7.2 HIGH· v3
6.5 MEDIUM· v2
The iThemes Security (better-wp-security) plugin before 7.0.3 for WordPress allows SQL Injection (by attackers with Admin privileges) via the logs page.