CVE Intelligence

ThemeNectar vulnerabilities

🔔 Create alert RSS

Published CVEs affecting ThemeNectar products: 4 record(s), with severity, exploitation and fixes.

Salient Portfolio 1Salient Shortcodes 1Salient 1Salient Core 1

Exploited only (KEV) →

CVE-2025-68079 Medium · 6.5 CWE-79 Dec 16, 2025
WordPress Salient Shortcodes plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Shortcodes salient-shortcodes allows Stored XSS.This issue affects Salient Shortcodes: from n/a through <= 1.5.4.
CVE-2025-68078 Medium · 6.5 CWE-79 Dec 16, 2025
WordPress Salient Portfolio theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeNectar Salient Portfolio salient-portfolio allows Stored XSS.This issue affects Salient Portfolio: from n/a through <= 1.8.2.
CVE-2025-59001 Medium · 4.3 CWE-862 Dec 16, 2025
WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeNectar Salient Core salient-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Salient Core: from n/a through <= 3.0.8.
CVE-2025-62028 Medium · 4.3 CWE-862 Nov 6, 2025
WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability
Missing Authorization vulnerability in ThemeNectar Salient salient.This issue affects Salient: from n/a through < 17.4.0.