WordPress theme
Himer - Social Questions and Answers WordPress Theme security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the theme or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium7
- Low0
All Himer - Social Questions and Answers WordPress Theme vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.8 | Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites ≤2.1.2Update to 2.1.3 | CVE-2024-2232 | |
| Medium6.4 | Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference ≤2.1.0Update to 2.1.1 | CVE-2024-2231 | |
| Medium4.3 | Cross-Site Request Forgery to Group Leave ≤2.1.0Update to 2.1.1 | CVE-2024-2233 | |
| Medium4.3 | Cross-Site Request Forgery to Private Group Join ≤2.1.0Update to 2.1.1 | CVE-2024-2040 | |
| Medium4.3 | Cross-Site Request Forgery to Poll Voting ≤2.1.0Update to 2.1.1 | CVE-2024-2235 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.1.0Update to 2.1.1 | CVE-2024-2234 | |
| Medium4.3 | Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference ≤5.9.2Update to 5.9.3 | CVE-2022-3343 |
- Medium5.8Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites
≤2.1.2Update to 2.1.3
- Medium6.4Social Questions and Answers <= 2.1.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
≤2.1.0Update to 2.1.1
- Medium4.3Cross-Site Request Forgery to Group Leave
≤2.1.0Update to 2.1.1
- Medium4.3Cross-Site Request Forgery to Private Group Join
≤2.1.0Update to 2.1.1
- Medium4.3Cross-Site Request Forgery to Poll Voting
≤2.1.0Update to 2.1.1
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.1.0Update to 2.1.1
- Medium4.3Builder forms Addon For WordPress (<= 5.9.2), Himer (<= 1.9.3) and Discy (<= 5.5.3) - Authenticated (Subscriber+) Insecure Direct Object Reference
≤5.9.2Update to 5.9.3
Himer - Social Questions and Answers WordPress Theme: common questions
Does Himer - Social Questions and Answers WordPress Theme have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Himer - Social Questions and Answers WordPress Theme: 7 medium. At least one is not fixed in the latest version.
How do I check which version of Himer - Social Questions and Answers WordPress Theme I run?
In wp-admin open Appearance → Themes and select the theme; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Himer - Social Questions and Answers WordPress Theme vulnerability?
CVE-2024-2232, published Jul 15, 2024: Himer - Social Questions and Answers <= 2.1.2 - Cross-Site Request Forgery to Arbitrary User Invites. Severity: Medium (CVSS 5.8).
Is any Himer - Social Questions and Answers WordPress Theme vulnerability listed in CISA KEV?
No. None of the known Himer - Social Questions and Answers WordPress Theme vulnerabilities is currently listed in the CISA KEV catalog.