ColorMag
ThemeGrill · 3 CVEs
CVE-2025-9202
MEDIUM
ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
Aug 20, 2025
CVE-2024-2500
MEDIUM
ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name
Mar 22, 2024
CVE-2024-0679
MEDIUM
ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation
Jan 20, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-9202 | ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation | MEDIUM | 0.23% | Aug 20, 2025 |
| CVE-2024-2500 | ColorMag <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Display Name | MEDIUM | 0.42% | Mar 22, 2024 |
| CVE-2024-0679 | ColorMag <= 3.1.2 - Missing Authorization to Arbitrary Plugin Installation | MEDIUM | 1.30% | Jan 20, 2024 |
Showing 1 to 3 of 3 CVEs