Marsian

Products

ProductCVEsExploitedLatest
TemplatesNext ToolKit2–Mar 1, 2025
i-amaze1–Jan 2, 2025
i-excel1–Apr 10, 2024
i-max1–Apr 10, 2024
i-transform1–Jan 2, 2025

Exploited and recent CVEs

  • CVE-2024-13559 Medium 6.4 TemplatesNext ToolKit <= 3.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2025-22310 Medium 6.5 WordPress TemplatesNext ToolKit plugin <= 3.2.9 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38731 Medium 4.3 WordPress i-amaze theme <= 1.3.7 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-38764 Medium 4.3 WordPress i-transform theme <= 3.0.9 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31386 Medium 4.3 Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability 0.4%
  • CVE-2024-31386 Medium 4.3 Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability 0.4%