ByteOS Network

ThemeGlow

Source -

CNA

BOS Name -

N/A

CNA CVEs -

ADP CVEs -

CISA CVEs -

NVD CVEs -

2Vulnerabilities found

CVE-2025-24563

Assigner-Patchstack

View Details

Assigner-Patchstack

CVSS Score-7.1||HIGH

EPSS-0.05% / 14.39%

7 Day CHG~0.00%

Published-31 Jan, 2025 | 08:24

Updated-10 Feb, 2025 | 22:06

WordPress Cleanup – Directory Listing & Classifieds plugin <= 1.0.4 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.

Vendor-ThemeGlow

Product-Cleanup – Directory Listing & Classifieds WordPress Plugin

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2024-43243

Assigner-Patchstack

View Details

Assigner-Patchstack

CVSS Score-10||CRITICAL

EPSS-0.25% / 47.85%

7 Day CHG~0.00%

Published-07 Jan, 2025 | 10:49

Updated-07 Jan, 2025 | 14:23

WordPress JobBoard Job listing plugin <= 1.2.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in ThemeGlow JobBoard Job listing allows Upload a Web Shell to a Web Server.This issue affects JobBoard Job listing: from n/a through 1.2.6.

Vendor-ThemeGlow

Product-JobBoard Job listing

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type