Advisories · Technology
themefic Tourfic.
Every CVE that names themefic Tourfic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
WordPress Tourfic plugin <= 2.23.1 - Broken Access Control vulnerability
- themefic Tourfic
- Broken access control
- CVSS 6.5 Medium
WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability
- Themefic Tourfic
- Broken access control
- CVSS 6.5 Medium
WordPress Tourfic plugin <= 2.22.5 - Broken Access Control vulnerability
- Themefic Tourfic
- Broken access control
- CVSS 8.5 High
WordPress Tourfic plugin <= 2.22.5 - SQL Injection vulnerability
- Themefic Tourfic
- SQL injection
- CVSS 5.3 Medium
WordPress Tourfic plugin <= 2.21.4 - Broken Access Control vulnerability
- Themefic Tourfic
- Broken access control
- CVSS 9.1 CriticalCritical · CVSS 9+
WordPress Tourfic plugin <= 2.15.3 - Arbitrary File Upload vulnerability
- Themefic Tourfic
- Unrestricted file upload
- CVSS 6.5 Medium
WordPress Tourfic plugin <= 2.11.8 - Cross Site Scripting (XSS) vulnerability
- Themefic Tourfic
- Cross-site scripting (XSS)
- CVSS 9.9 CriticalCritical · CVSS 9+
WordPress Tourfic plugin <= 2.11.15 - Arbitrary File Upload vulnerability
- Themefic Tourfic
- Unrestricted file upload
- CVSS 8.5 High
WordPress Tourfic plugin <= 2.11.17 - PHP Object Injection vulnerability
- Themefic Tourfic
- Insecure deserialization
- CVSS 7.1 High
WordPress Tourfic plugin <= 2.11.7 - Reflected Cross Site Scripting (XSS) vulnerability
- Themefic Tourfic
- Cross-site scripting (XSS)