PX-lab BoomBox Theme Extensions

• CVE-2024-12295 High 8.8 BoomBox Theme Extensions <= 1.8.0 - Authenticated (Subscriber+) Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password 0.4%
• CVE-2024-12859 High 8.8 BoomBox Theme Extensions <= 1.8.0 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%