Eight Sec

Vulnerabilities 5Slug eight-sec

Minimum safe version

—

No explicit fix version available

Affected up to1.1.4 ⚠⚠ 4 vulnerabilities have no fix
Medium 6.5 Unfixed
2022-04-18≤ 1.1.4

CVE-2022-23975

CVEWordfence
N/A Unfixed
2022-01-11≤ 1.1.4

AccessPress Themes and Plugin <= Various Versions - Cross-Site Request Forgery

Wordfence
High 8.8
2021-12-24≤ 1.1.4

WordPress Eight Sec theme <= 1.1.4 - Arbitrary File Upload vulnerability

PatchstackCVEWordfence
N/A Unfixed
2022-01-24≤ 1.1.4

WordPress Eight Sec theme <= 1.1.4 - Cross-Site Request Forgery (CSRF) leading to Arbitrary Plugin Activation/Deactivation

Patchstack
N/A Unfixed
2022-01-28≤ 1.1.4

WordPress Eight Sec theme <= 1.1.4 - Authenticated Arbitrary Plugin Activation/Deactivation vulnerability

Patchstack