CVE Intelligence

Silverks vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Silverks products: 2 record(s), with severity, exploitation and fixes.

Graphene 2

Exploited only (KEV) →

CVE-2026-17025 Medium · 6.4 CWE-79 Oct 10, 2026
Graphene <= 2.9.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Fields
The Graphene theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'Current location' and 'Author profile image URL' Profile Fields in all versions up to, and including, 2.9.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-81281 Medium · 6.5 CWE-79 Sep 3, 2026
WordPress Graphene theme <= 2.9.4 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting (XSS) in Graphene <= 2.9.4 versions.