Advisories · Technology
Theme-Spirit Spirit Framework.
Every CVE that names Theme-Spirit Spirit Framework among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Spirit Framework <= 1.2.14 - Authentication Bypass to Account Takeover and Privilege Escalation
- Theme-Spirit Spirit Framework
- Authentication bypass
- CVSS 7.5 High
Spirit Framework <= 1.2.13 - Authenticated (Subscriber+) Local File Inclusion
- Theme-Spirit Spirit Framework
- File inclusion