Discy (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-09. Vendor: Unknown.

CVEs of Discy

• CVE-2022-3343 - CVSS 3.5 (low), 2023-01-09: The WPQA Builder WordPress plugin before 5.9.3 (which is a companion plugin used with Discy and Himer Discy WordPress themes) incorrectly tries to validate…
• CVE-2022-1323 - CVSS 6.5 (medium), 2022-08-08: The Discy WordPress theme before 5.0 lacks authorization checks then processing ajax requests to the discy_update_options action, allowing any logged in users…
• CVE-2022-1422 - CVSS 6.5 (medium), 2022-06-08: The Discy WordPress theme before 5.2 does not check for CSRF tokens in the AJAX action discy_reset_options, allowing an attacker to trick an admin into…
• CVE-2022-1421 - CVSS 4.3 (medium), 2022-06-08: The Discy WordPress theme before 5.2 lacks CSRF checks in some AJAX actions, allowing an attacker to make a logged in admin change arbitrary 's settings…