Thème WordPress
Vulnérabilités Support for CitiLights – Real Estate WordPress Theme
Cette page rassemble les failles publiées pour Support for CitiLights – Real Estate WordPress Theme, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Support for CitiLights – Real Estate WordPress Theme
3 fiches
Support for CitiLights – Real Estate WordPress Theme <= 3.7.1 – Authenticated (Subscriber+) PHP Object Injection
The Support for CitiLights – Real Estate WordPress Theme theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.7.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with…
*-3.7.1
3.7.2
16/03/2026
Support for CitiLights – Real Estate WordPress Theme <= 3.7.1 – Reflected Cross-Site Scripting
The Support for CitiLights – Real Estate WordPress Theme theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.7.1 due to insufficient input sanitization and output escaping. This makes it possible for…
*-3.7.1
3.7.2
16/03/2026
CitiLights < 3.7.2 – Missing Authorization
The CitiLights theme for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to 3.7.2. This makes it possible for unauthenticated attackers to perform an unauthorized action.
[*, 3.7.2)
3.7.2
16/02/2026
Thèmes également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.