TeconceTheme vulnerabilities and threats

14 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.3	EPSS 0.4%	CVE-2026-73388Nikstore Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-08-19CVE Database V5CVE-2026-73388 CVE-2026-73388 is a critical unauthenticated SQL Injection vulnerability affecting TeconceTheme Nikstore Core versions up to 1.5. This flaw allows remote attackers to inject malicious SQL commands without authentication, potentially leading to high confidentiality impact and partial availability impact. No patch or remediation information is currently provided by the vendor. EPSS 0.4%Vulnerability TeconceTheme CWE-89 #ghsa-c3wv-g28g-q6ch	CVE Database V5	2026-08-19
High	7.1	EPSS 0.3%	CVE-2026-32333Mayosis Core (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-18CVE Database V5CVE-2026-32333 Unauthenticated Cross Site Scripting (XSS) in Mayosis Core <= 5.4.7 versions. EPSS 0.3%Vulnerability TeconceTheme CWE-79	CVE Database V5	2026-08-18
Medium	5.3	EPSS 0.2%	CVE-2026-39655Mayosis Core (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.2%2026-05-26CVE Database V5CVE-2026-39655 Missing Authorization vulnerability in TeconceTheme Mayosis Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Mayosis Core: from n/a through 5.4.7. EPSS 0.2%Vulnerability TeconceTheme CWE-862	CVE Database V5	2026-05-26
Critical	9.3	EPSS 0.4%	CVE-2025-69366Emerce Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69366 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Emerce Core emerce-core allows Blind SQL Injection.This issue affects Emerce Core: from n/a through <= 1.8. EPSS 0.4%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69365Uroan Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69365 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Uroan Core uroan-core allows Blind SQL Injection.This issue affects Uroan Core: from n/a through <= 1.4.4. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69310Woodly Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69310 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Woodly Core woodly-core allows Blind SQL Injection.This issue affects Woodly Core: from n/a through <= 1.4. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69309Saasplate Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69309 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Saasplate Core saasplate-core allows Blind SQL Injection.This issue affects Saasplate Core: from n/a through <= 1.2.8. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69308Nestbyte Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69308 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Nestbyte Core nestbyte-core allows Blind SQL Injection.This issue affects Nestbyte Core: from n/a through <= 1.2. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69307Medinik Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69307 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Medinik Core medinik-core allows Blind SQL Injection.This issue affects Medinik Core: from n/a through <= 1.3.6. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.3%	CVE-2025-69306Electio Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.3%2026-02-20CVE Database V5CVE-2025-69306 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Electio Core electio-core allows Blind SQL Injection.This issue affects Electio Core: from n/a through <= 1.4. EPSS 0.3%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.4%	CVE-2025-69305Crete Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.4%2026-02-20CVE Database V5CVE-2025-69305 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Crete Core crete-core allows Blind SQL Injection.This issue affects Crete Core: from n/a through <= 1.4.3. EPSS 0.4%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.5%	CVE-2025-69304Allmart (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2026-02-20CVE Database V5CVE-2025-69304 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Allmart allmart-core allows Blind SQL Injection.This issue affects Allmart: from n/a through <= 1.1. EPSS 0.5%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
Critical	9.3	EPSS 0.5%	CVE-2025-69295Coven Core (WordPress plugin) · SQL Injection Critical9.3EPSS 0.5%2026-02-20CVE Database V5CVE-2025-69295 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TeconceTheme Coven Core coven-core allows Blind SQL Injection.This issue affects Coven Core: from n/a through <= 1.3. EPSS 0.5%Vulnerability TeconceTheme	CVE Database V5	2026-02-20
High	7.2	EPSS 0.2%	CVE-2025-49418Allmart (WordPress plugin) · Server-Side Request Forgery (SSRF) High7.2EPSS 0.2%2025-07-04CVE Database V5CVE-2025-49418 Server-Side Request Forgery (SSRF) vulnerability in TeconceTheme Allmart allmart-core allows Server Side Request Forgery.This issue affects Allmart: from n/a through <= 1.0.0. EPSS 0.2%Vulnerability TeconceTheme	CVE Database V5	2025-07-04

Page 1 of 1