vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2023-2813

Multiple Themes - Reflected XSS

MEDIUM
6.1
CVSS Score
Published: September 4, 2023 at 11:27 AM UTC
Updated: June 17, 2026 at 05:53 AM UTC
48 products affected across 27 vendorsEverseArendelleNokke

Using Aapna by Unknown?

Get instant alerts when new vulnerabilities affect Aapna - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM6.1
Exploit prediction
EPSS 1%

Description

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme through 1.5.8.5, Bazaar Lite WordPress theme before 1.8.6, Brain Power WordPress theme through 1.2, BunnyPressLite WordPress theme before 2.1, Cafe Bistro WordPress theme before 1.1.4, College WordPress theme before 1.5.1, Connections Reloaded WordPress theme through 3.1, Counterpoint WordPress theme through 1.8.1, Digitally WordPress theme through 1.0.8, Directory WordPress theme before 3.0.2, Drop WordPress theme before 1.22, Everse WordPress theme before 1.2.4, Fashionable Store WordPress theme through 1.3.4, Fullbase WordPress theme before 1.2.1, Ilex WordPress theme before 1.4.2, Js O3 Lite WordPress theme through 1.5.8.2, Js Paper WordPress theme through 2.5.7, Kata WordPress theme before 1.2.9, Kata App WordPress theme through 1.0.5, Kata Business WordPress theme through 1.0.2, Looki Lite WordPress theme before 1.3.0, moseter WordPress theme through 1.3.1, Nokke WordPress theme before 1.2.4, Nothing Personal WordPress theme through 1.0.7, Offset Writing WordPress theme through 1.2, Opor Ayam WordPress theme through 18, Pinzolo WordPress theme before 1.2.10, Plato WordPress theme before 1.1.9, Polka Dots WordPress theme through 1.2, Purity Of Soul WordPress theme through 1.9, Restaurant PT WordPress theme before 1.1.3, Saul WordPress theme before 1.1.0, Sean Lite WordPress theme before 1.4.6, Tantyyellow WordPress theme through 1.0.0.5, TIJAJI WordPress theme through 1.43, Tiki Time WordPress theme through 1.3, Tuaug4 WordPress theme through 1.4, Tydskrif WordPress theme through 1.1.3, UltraLight WordPress theme through 1.2, Venice Lite WordPress theme before 1.5.5, Viala WordPress theme through 1.3.1, viburno WordPress theme before 1.3.2, Wedding Bride WordPress theme before 1.0.2, Wlow WordPress theme before 1.2.7 suffer from the same issue about the search box reflecting the results causing XSS which allows an unauthenticated attacker to exploit against users if they click a malicious link.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Connections Reloaded· Ajaydsouzawordpress-theme
95%
v ≤ 3.1
Atlast Business· Archimidismertzanoswordpress-theme
95%
v ≤ 1.5.8.5
Fashionable Store· Archimidismertzanoswordpress-theme
95%
v ≤ 1.3.4
Nothing Personal· Archimidismertzanoswordpress-theme
95%
v ≤ 1.0.7
Brain Power· Arthousewebdesignwordpress-theme
95%
v ≤ 1.2
Moseter· Asmediawordpress-theme
95%
v ≤ 1.3.1
Tuaug4· Asmediawordpress-theme
95%
v ≤ 1.4
Cafe Bistro· Ayecodewordpress-theme
95%
v < 1.1.4
Affected range stops below 1.1.4, so it looks safe — our inference, not a vendor statement
College· Ayecodewordpress-theme
95%
v < 1.5.1
Affected range stops below 1.5.1, so it looks safe — our inference, not a vendor statement
Directory· Ayecodewordpress-theme
95%
v < 3.0.2
Affected range stops below 3.0.2, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

ExploitVDB EntryTechnical DescriptionThird Party Advisory
Source: [email protected]
https://wpscan.com/vulnerability/f434afd3-7de4-4bf4-a9bb-9f9aeaae1dc5

CVSS

6.1MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Vector?

Quick Info

StatusMODIFIED
CWE

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card