ThemeGrill / ColorMag

3 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2025-9202	ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation	MEDIUM	4.3	Aug 20, 2025
CVE-2024-2500	ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name	MEDIUM	6.4	Mar 22, 2024
CVE-2024-0679	ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation	MEDIUM	6.5	Jan 20, 2024

Rows per page

Showing 1 to 3 of 3 CVEs