blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2023-2813

MEDIUM 6.1 CVSS 3.1
Published
September 4, 2023
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

Affected WordPress components

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

  • Unknown Aapna — Up to and including 1.3
  • Unknown Anand — Up to and including 1.2
  • Unknown Anfaust — Up to and including 1.1
  • Unknown Arendelle — Before 1.1.13
  • Unknown Atlast Business — Up to and including 1.5.8.5
  • Unknown Bazaar Lite — Before 1.8.6
  • Unknown Brain Power — Up to and including 1.2
  • Unknown BunnyPressLite — Before 2.1
  • Unknown Cafe Bistro — Before 1.1.4
  • Unknown College — Before 1.5.1
  • Unknown Connections Reloaded — Up to and including 3.1
  • Unknown Counterpoint — Up to and including 1.8.1
  • Unknown Digitally — Up to and including 1.0.8
  • Unknown Directory — Before 3.0.2
  • Unknown Drop — Before 1.22
  • Unknown Everse — Before 1.2.4
  • Unknown Fashionable Store — Up to and including 1.3.4
  • Unknown Fullbase — Before 1.2.1
  • Unknown Ilex — Before 1.4.2
  • Unknown Js O3 Lite — Up to and including 1.5.8.2
  • Unknown Js Paper — Up to and including 2.5.7
  • Unknown Kata — Before 1.2.9
  • Unknown Kata App — Up to and including 1.0.5
  • Unknown Kata Business — Up to and including 1.0.2
  • Unknown Looki Lite — Before 1.3.0
  • Unknown moseter — Up to and including 1.3.1
  • Unknown Nokke — Before 1.2.4
  • Unknown Nothing Personal — Up to and including 1.0.7
  • Unknown Offset Writing — Up to and including 1.2
  • Unknown Opor Ayam — Up to and including 1.8
  • Unknown Pinzolo — Before 1.2.10
  • Unknown Plato — Before 1.1.9
  • Unknown Polka Dots — Up to and including 1.2
  • Unknown Purity Of Soul — Up to and including 1.9
  • Unknown Restaurant PT — Before 1.1.3
  • Unknown Saul — Before 1.1.0
  • Unknown Sean Lite — Before 1.4.6
  • Unknown Tantyyellow — Up to and including 1.0.0.5
  • Unknown TIJAJI — Up to and including 1.43
  • Unknown Tiki Time — Up to and including 1.3
  • Unknown Tuaug4 — Up to and including 1.4
  • Unknown Tydskrif — Up to and including 1.1.3
  • Unknown UltraLight — Up to and including 1.2
  • Unknown Venice Lite — Before 1.5.5
  • Unknown Viala — Up to and including 1.3.1
  • Unknown viburno — Before 1.3.2
  • Unknown Wedding Bride — Before 1.0.2
  • Unknown Wlow — Before 1.2.7
  • ajaydsouza connections_reloaded — Up to and including 3.1
  • archimidismertzanos atlast_business — Up to and including 1.5.8.5
  • archimidismertzanos fashionable_store — Up to and including 1.3.4
  • archimidismertzanos nothing_personal — Up to and including 1.0.7
  • arthousewebdesign brain_power — Up to and including 1.2
  • asmedia moseter — Up to and including 1.3.1
  • asmedia tuaug4 — Up to and including 1.4
  • ayecode cafe_bistro — Before 1.1.4
  • ayecode college — Before 1.5.1
  • ayecode directory — Before 3.0.2
  • ayecode plato — Before 1.1.9
  • ayecode restaurant_pt — Before 1.1.3
  • ayecode wedding_bride — Before 1.0.2
  • climaxthemes kata — Before 1.2.9
  • competethemes drop — Before 1.22
  • davidgarlitz viala — Up to and including 1.3.1
  • deothemes arendelle — Before 1.1.13
  • deothemes everse — Before 1.2.4
  • deothemes nokke — Before 1.2.4
  • dotecsa ilex — Before 1.4.2
  • dotecsa viburno — Before 1.3.2
  • fredriksoerlie ultralight — Up to and including 1.2
  • fyrewurks polka_dots — Up to and including 1.2
  • fyrewurks tiki_time — Up to and including 1.3
  • henleythemes counterpoint — Up to and including 1.8.1
  • iznyn opor_ayam — Up to and including 1.8
  • iznyn purity_of_soul — Up to and including 1.9
  • jinwen js_o3_lite — Up to and including 1.5.8.2
  • jinwen js_paper — Up to and including 2.5.7
  • marchettidesign fullbase — Before 1.2.1
  • marchettidesign wlow — Before 1.2.7
  • omarfolgheraiter digitally — Up to and including 1.0.8
  • saumendra aapna — Up to and including 1.3
  • saumendra anand — Up to and including 1.2
  • ta2g tantyyellow — Up to and including 1.0.0.5
  • themeinprogress bazaar_lite — Before 1.8.6
  • themeinprogress looki_lite — Before 1.3.0
  • themeinprogress saul — Before 1.1.0
  • themeinprogress saul_lite — Before 1.4.6
  • themeinprogress venice_lite — Up to and including 1.5.5
  • thewebhunter anfaust — Up to and including 1.1
  • thewebhunter offset_writing — Up to and including 1.2
  • thriveweb pinzolo — Before 1.2.10
  • tijaji tijaji — Up to and including 1.43
  • wpmole tydskrif — Up to and including 1.1.3
  • yws bunnypress_lite — Up to and including 2.1

References

  • wpscan.com https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record