Advisories · Technology

scriptsbundle DWT - Directory & Listing WordPress Theme.

Every CVE that names scriptsbundle DWT - Directory & Listing WordPress Theme among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-12827 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

DWT - Directory & Listing WordPress Theme <= 3.3.6 - Unauthenticated Arbitrary User Password Reset
- scriptsbundle DWT - Directory & Listing WordPress Theme
- CWE-620
Not analysed yet 27 Jun 2025
CVE-2025-0169 CVE record

CVSS 6.4 Medium

DWT - Directory & Listing WordPress Theme <=3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- scriptsbundle DWT - Directory & Listing WordPress Theme
- Cross-site scripting (XSS)
Not analysed yet 8 Feb 2025
CVE-2025-0170 CVE record

CVSS 6.1 Medium

DWT - Directory & Listing WordPress Theme <= 3.3.3 - Reflected Cross-Site Scripting
- scriptsbundle DWT - Directory & Listing WordPress Theme
- Cross-site scripting (XSS)
Not analysed yet 16 Jan 2025