Portotheme vulnerabilities
We track 2 vulnerabilities in Portotheme products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Portotheme vulnerabilities
- 8.8 High severity
Porto Theme - Functionality: Improper Control of Filename for Include/Require Statement in PHP Program
The Porto Theme - Functionality plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.0.9 via the 'slideshow_type' post meta. This makes it possible for authenticated attackers, with contributor-level and above perm
- 9.8 Critical severity
Porto Theme - Functionality: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Porto Theme Porto Theme - Functionality.This issue affects Porto Theme - Functionality: from n/a before 2.12.1.