Thoefter vulnerabilities
We track 2 vulnerabilities in Thoefter products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Thoefter vulnerabilities
- 8.8 High severity
CMS Commander – Manage Multiple Sites: Improper Neutralization of Special Elements used in an SQL Command
The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up to, and including, 2.288. This is due to insufficient escaping on the user supplied parameters
- 9.8 Critical severity
CMS Commander – Manage Multiple Sites: Insufficient Entropy
The CMS Commander plugin for WordPress is vulnerable to authorization bypass due to the use of an insufficiently unique cryptographic signature on the 'cmsc_add_site' function in versions up to, and including, 2.287. This makes it possible for unauthenticated