Theme Wibar
Approved changes feed: RSS · Atom
cpe:2.3:a:themeftc:theme_wibar:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Themeftc (f0ec3121-d1e1-5e69-9e00-d9ffae5304f0) |
|---|---|
| Product | Theme Wibar (01f48376-7b2f-55aa-9e5e-4a15c115e5df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37235 |
vulnerable | 2026-06-08 05:25:50.370297 |
WordPress Theme Wibar 1.1.8 Stored Cross-Site Scripting via Brand Component
MEDIUM (6.4)
WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by manipulating the Logo URL parameter. Attackers with editor, administrator, contributor, or author privileges can inject base64-encoded script payloads through the ftc_brand_url input field to execute arbitrary JavaScript when users visit the brand page.
Published: 2026-05-16T15:25:52.200Z
Updated: 2026-05-24T01:36:56.866Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.