Skip to content
EXPLOIT
.CC
CVEs
Search
About
synced 9 MIN AGO
T-9M
01
Record
STATE: —
02
Description
SRC: CNA
03
Metadata
SCHEMA: CVE JSON 5
04
Affected products
PAIRS: —
05
References
REFS: —
01
Record
STATE: PUBLISHED
CVE-2026-28154
WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (XSS) vulnerability
High
PUBLISHED
CNA: Patchstack
Base score
7.1
CVSS v3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
View raw JSON
CVE Program record
02
Description
CNA: Patchstack
WordPress Samex and M.Anh WordPress themes affected by Cross Site Scripting (XSS) vulnerability
03
Metadata
SCHEMA: 5.2
Published
2026-08-13 14:25Z
1 DAY AGO
Last updated
2026-08-14 15:38Z
3 HR AGO
Reserved
2026-02-25
Assigning CNA
Patchstack
Record state
PUBLISHED
Severity
High (CVSS 7.1)
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Weaknesses
CWE-79
SSVC decision
Exploitation
none
Automatable
no
Technical Impact
partial
Data version
5.2
Document digest
276f9ec7458be30273e53b5c2204dae58d7ac19215cb2a1f9540a92d682dcac9
04
Affected products
PAIRS: 2
Vendor
Product
Versions
Platforms
snstheme
Samex - Clean, Minimal Shop WooCommerce WordPress Theme
<= 2.5
—
snstheme
M.Anh - Fashion WooCoommerce WordPress Theme
<= 1.7
—
05
References
REFS: 2
patchstack.com
https://patchstack.com/database/wordpress/theme/samex/vulnerability/wordpress-samex-clean-minimal-shop-woocommerce-wordpress-theme-theme-2-5-cross-site-scripting-xss-vulnerability?_s_id=cve
vdb-entry
patchstack.com
https://patchstack.com/database/wordpress/theme/manh/vulnerability/wordpress-m-anh-theme-1-7-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
vdb-entry