themeinprogress
Security Risk Profile
69
/100
highSecurity Risk Score
Comprehensive risk assessment based on 4 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from August 12, 2020 to present
4
Total CVEs
2
Critical+High
0
Exploited
1
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
1
Critical/High
Risk Level
69/100
high
Severity Distribution
Critical
0High
2Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
XSS
2
2
CSRF
1
Most Affected Products
1. ThemeinProgress Wip Custom Login Wordpress2
2. Ajaydsouza Connections Reloaded Wordpress1
3. Archimidismertzanos Atlast Business Wordpress1
4. Archimidismertzanos Fashionable Store Wordpress1
5. Archimidismertzanos Nothing Personal Wordpress1
Recent Vulnerabilities
See more →CVE-2022-42884
CVSS 8.8high
WordPress WIP Custom Login Plugin <= 1.2.7 is vulnerable to Broken Access Control
1/17/2024
CVE-2023-2813
CVSS 6.1medium
Multiple Themes - Reflected XSS
9/4/2023🔧 No Patch
CVE-2023-33313
CVSS 8.8high
WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)
5/28/2023🔧 No Patch
CVE-2020-17362
CVSS 6.1medium
8/12/2020🔧 No Patch
Monitor themeinprogress in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.