All 6 CVE vulnerabilities found in Porto Theme - Functionality, with AI-generated Chinese analysis, references, and POCs.
Vendor: Porto Theme
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-63067 | WordPress Porto Theme - Functionality plugin < 3.7.3 - Broken Access Control vulnerability CWE-862 | 4.3 | Medium | 2025-12-09 |
| CVE-2025-63066 | WordPress Porto Theme - Functionality plugin < 3.7.3 - Cross Site Scripting (XSS) vulnerability CWE-79 | 6.5 | Medium | 2025-12-09 |
| CVE-2023-48739 | WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerability CWE-862 | 5.3 | Medium | 2025-01-02 |
| CVE-2024-3808 | Porto Theme - Functionality <= 3.1.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode CWE-98 | 8.8 | High | 2024-05-09 |
| CVE-2024-3809 | Porto Theme - Functionality <= 3.0.9 - Authenticated (Contributor+) Local File Inclusion via Post Meta CWE-98 | 8.8 | High | 2024-05-09 |
| CVE-2023-48738 | WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL Injection CWE-89 | 9.3 | Critical | 2023-12-19 |
All 6 known CVE vulnerabilities affecting Porto Theme - Functionality with full Chinese analysis, references, and POCs where available.