Himer (2code) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 26 known versions, newest CVE from 2024-08-05. Vendor: 2code.

CVEs of Himer

• CVE-2024-2232 - CVSS 8.1 (high), 2024-08-05: The lacks CSRF checks allowing a user to invite any user to any group (including private groups)
• CVE-2024-2234 - CVSS 6.3 (medium), 2024-07-03: The Himer WordPress theme before 2.1.1 does not sanitise and escape some of its Post settings, which could allow high privilege users such as Contributor to…
• CVE-2024-2233 - CVSS 6.3 (medium), 2024-07-03: The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions…
• CVE-2024-2231 - CVSS 6.5 (medium), 2024-07-03: The allows any authenticated user to join a private group due to a missing authorization check on a function
• CVE-2024-2235 - CVSS 6.3 (medium), 2024-07-03: The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users vote on any polls, including those…
• CVE-2024-2040 - CVSS 6.3 (medium), 2024-07-03: The Himer WordPress theme before 2.1.1 does not have CSRF checks in some places, which could allow attackers to make users join private groups via a CSRF attack