ThemeNectar vulnerabilities
We track 2 vulnerabilities in ThemeNectar products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 18, 2024.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest ThemeNectar vulnerabilities
- 7.5 High severity
Salient Core: Improper Control of Filename for Include/Require Statement in PHP Program
The Salient Core plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.7 via the 'nectar_icon' shortcode 'icon_linea' attribute. This makes it possible for authenticated attackers, with contributor-level and above
- 8.8 High severity
Salient Shortcodes: Improper Control of Filename for Include/Require Statement in PHP Program
The Salient Shortcodes plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.5.3 via the 'icon' shortcode 'image' attribute. This makes it possible for authenticated attackers, with contributor-level and above permi