Discy (2code) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 68 known versions, newest CVE from 2022-08-08. Vendor: 2code.

CVEs of Discy

• CVE-2022-1323 - CVSS 6.5 (medium), 2022-08-08: The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_options action, allowing any logged in users…
• CVE-2022-1422 - CVSS 6.5 (medium), 2022-06-08: The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into…
• CVE-2022-1421 - CVSS 4.3 (medium), 2022-06-08: The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings…