Shufflehound vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Shufflehound products: 2 record(s), with severity, exploitation and fixes.

Lemmony 1 Gillion 1

Exploited only (KEV) →

CVE-2026-66477 Medium · 5.3 CWE-862 Jul 27, 2026

WordPress Gillion theme <= 4.13 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Gillion <= 4.13 versions.

CVE-2026-32328 Medium · 5.4 CWE-352 Mar 13, 2026

WordPress Lemmony theme < 1.7.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery (CSRF) vulnerability in shufflehound Lemmony lemmony allows Cross Site Request Forgery.This issue affects Lemmony: from n/a through < 1.7.1.