https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 11:16:07 +0000 https://cve.radiocsirt.org/vuln/cve-2024-6872 <p><strong>Affected:</strong> TemplateSpare – 1000+ WordPress Starter Templates &amp; Full Site Migration Tool | 1-Click Import/Export &amp; No-Code Builder</p> <p>The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor &amp; Gutenberg Blocks! – TemplateSpare plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;templatespare_activate_required_theme&#39; and &#39;templatespare_get_theme_status&#39; functions in all versions up to, and including, 2.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate any installed theme and read any theme status. If the attacker attempts to activate a theme that is not installed, a non-existent theme with the slug chosen by the attacker will be considered the active theme, leaving the site with no theme functionality.</p> <p><strong>Affected:</strong> TemplateSpare – 1000+ WordPress Starter Templates &amp; Full Site Migration Tool | 1-Click Import/Export &amp; No-Code Builder</p> <p>The Build Your Dream Website Fast with 400+ Starter Templates and Landing Pages, No Coding Needed, One-Click Import for Elementor &amp; Gutenberg Blocks! – TemplateSpare plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the &#39;templatespare_activate_required_theme&#39; and &#39;templatespare_get_theme_status&#39; functions in all versions up to, and including, 2.4.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate any installed theme and read any theme status. If the attacker attempts to activate a theme that is not installed, a non-existent theme with the slug chosen by the attacker will be considered the active theme, leaving the site with no theme functionality.</p> https://cve.radiocsirt.org/vuln/cve-2024-6872