Themekraft
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 27, 2019 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
WordPress BuddyForms Plugin <= 2.9.0 - Local File Inclusion vulnerability
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability
BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability
Monitor Themekraft in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.