Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-39778Ansar Import – One Click Starter Sites – for Elementor & Themes · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-39778 Unauthenticated Cross Site Scripting (XSS) in Ansar Import – One Click Starter Sites – for Elementor & Themes <= 2.1.2 versions. EPSS 0.2%Vulnerability themeansar #cwe-79	CVE Database V5	2026-10-06
Medium	5.4	EPSS 0.3%	CVE-2026-24586Newses · Missing Authorization Medium5.4EPSS 0.3%2026-05-25CVE Database V5CVE-2026-24586 Missing Authorization vulnerability in Themeansar Newses allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Newses: from n/a through 2.0.0.77. EPSS 0.3%Vulnerability Themeansar #cwe-862	CVE Database V5	2026-05-25
Medium	4.3	EPSS 0.2%	CVE-2025-8682Newsup · Missing Authorization Medium4.3EPSS 0.2%2025-10-11CVE Database V5CVE-2025-8682 The Newsup theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the newsup_admin_info_install_plugin() function in all versions up to, and including, 5.0.10. This makes it possible for unauthenticated attackers to install the ansar-import plugin. EPSS 0.2%Vulnerability themeansar #cwe-862	CVE Database V5	2025-10-11

Showing 1–3 of 3 results