Betheme
Muffin group
Developer
N/A
Latest version
N/A
Downloads
N/A
Last updated
Vulnerability history
2 present
21 patched
15 Mitigation rules
- Cross Site Scripting (XSS) vulnerability<= 28.5.803/10/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'icon_box_2' Shortcode vulnerability<= 28.425/08/2026
- Remote Code Execution (RCE) vulnerability<= 28.5.728/07/2026
- Authenticated (Author+) Arbitrary File Upload to Remote Code Execution vulnerability<= 28.406/05/2026
- Authenticated (Contributor+) Arbitrary File Deletion vulnerability<= 28.404/05/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'page_title' vulnerability<= 28.1.608/10/2025
- Cross Site Scripting (XSS) vulnerability<= 28.206/10/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 28.1.305/08/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 28.0.315/04/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Custom JS vulnerability<= 27.6.121/01/2025
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File vulnerability<= 27.5.513/09/2024
- Authenticated (Contributor+) PHP Object Injection vulnerability<= 27.5.630/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability<= 27.5.630/08/2024
- Contributor+ Broken Access Control vulnerability<= 27.1.114/11/2023
- Author+ Broken Access Control vulnerability<= 27.1.110/08/2023
- Reflected Cross Site Scripting (XSS) vulnerability<= 26.7.513/04/2023
- Broken Access Control vulnerability<= 26.6.121/11/2022
- Broken Access Control vulnerability<= 26.6.121/11/2022
- Broken Access Control vulnerability<= 26.6.121/11/2022
- Broken Access Control vulnerability<= 26.6.121/11/2022
- Broken Access Control vulnerability<= 26.6.121/11/2022
- Auth. Stored Cross-Site Scripting (XSS) vulnerability<= 26.6.121/11/2022
- Auth. PHP Object Injection vulnerability<= 26.5.1.417/11/2022