Vendor

    iThemes

    27 known vulnerabilities in products by iThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    27

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in iThemes
    CriticalCVE-2020-14092

    iThemes Paypal Pro: SQL Injection

    		9.8
    HighCVE-2022-31474

    WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal

    		7.5
    HighCVE-2018-12636

    iThemes Security: SQL Injection

    		7.2
    HighCVE-2018-7433

    iThemes Security: security vulnerability

    		7.5
    HighCVE-2020-36176

    Ithemes Security: security vulnerability

    		7.5
    MediumCVE-2015-9377

    iThemes Builder Theme Depot: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9376

    iThemes Mobile: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9366

    iThemes Custom URL Tracking: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9365

    iThemes Authorize.net: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9379

    iThemes Builder Style Manager: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9378

    iThemes Builder Theme Market: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9375

    iThemes Table Rate Shipping: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9374

    iThemes Stripe: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9372

    iThemes Membership: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9371

    iThemes Manual Purchases: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9370

    iThemes Invoices: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9369

    Ithemes Easy Us Sales Taxes: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9368

    iThemes Easy EU Value Added (VAT) Taxes: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9367

    iThemes Easy Canadian Sales Taxes: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2015-9363

    iThemes Exchange: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2022-4897

    BackupBuddy < 8.8.3 - Multiple Reflected Cross-Site Scripting

    		6.1
    Not ratedCVE-2013-2741

    iThemes BackupBuddy: Information Disclosure

    		—
    Not ratedCVE-2013-2743

    iThemes BackupBuddy: Authentication Bypass

    		—
    Not ratedCVE-2013-2742

    iThemes BackupBuddy: security vulnerability

    		—
    Not ratedCVE-2013-2744

    iThemes BackupBuddy: security vulnerability

    		—

    All vulnerabilities in search

    Products

    Products by iThemes
    iThemes BackupBuddy60