Approved changes feed: RSS · Atom

cpe:2.3:a:nasatheme:elessi:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNasatheme (52095724-6970-53de-8929-36d8ac67b2c4)
ProductElessi (27c7253c-25a8-5647-80d6-20ebb764405a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-49873 vulnerable 2026-06-08 07:29:15.037816 WordPress Elessi theme <= 6.3.9 - Cross Site Scripting (XSS) Vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NasaTheme Elessi elessi-theme allows Reflected XSS.This issue affects Elessi: from n/a through <= 6.3.9.
Published: 2025-06-20T15:04:30.054Z
Updated: 2026-04-28T16:13:06.738Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-49070 vulnerable 2026-06-08 07:29:12.543962 WordPress Elessi < 6.4.1 - Local File Inclusion Vulnerability
HIGH (7.5)
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in NasaTheme Elessi elessi-theme allows PHP Local File Inclusion.This issue affects Elessi: from n/a through < 6.4.1.
Published: 2025-07-04T11:17:50.195Z
Updated: 2026-04-28T16:12:58.656Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.