ThemeNectar

Products

ProductCVEsExploitedLatest
Salient Shortcodes3–Dec 16, 2025
Salient Core2–Dec 16, 2025
Salient1–Nov 6, 2025
Salient Portfolio1–Dec 16, 2025

Exploited and recent CVEs

  • CVE-2025-68079 Medium 6.5 WordPress Salient Shortcodes plugin <= 1.5.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-68078 Medium 6.5 WordPress Salient Portfolio theme <= 1.8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-59001 Medium 4.3 WordPress Salient Core plugin <= 3.0.8 - Broken Access Control vulnerability 0.2%
  • CVE-2025-62028 Medium 4.3 WordPress Salient theme < 17.4.0 - Broken Access Control vulnerability 0.2%
  • CVE-2024-3812 High 7.5 Salient Core <= 2.0.7 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%
  • CVE-2024-3810 High 8.8 Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Local File Inclusion via Shortcode 0.6%
  • CVE-2024-3811 Medium 6.4 Salient Shortcodes <= 1.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%