Plugin icon

Cornerstone

cornerstone

Vulnerabilities:

7

Last Updated:

July 16, 2024

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2026-06-16
Title
Cornerstone < 7.8.8 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 7.8.8
CVSS
6.5 (medium)
Published
2026-06-04
Title
Cornerstone < 7.8.8 - Authenticated (Subscriber+) Arbitrary Code Execution
Fixed in
Fixed in 7.8.8
CVSS
8.8 (high)
Published
2026-06-03
Title
Themeco Cornerstone < 7.8.8 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Password Hash Disclosure
Fixed in
Fixed in 7.8.8
CVSS
7.7 (high)
Published
2026-06-03
Title
Themeco Cornerstone < 7.8.9 (Premium, bundled with X Theme) - Subscriber+ Arbitrary User Meta Disclosure
Fixed in
Fixed in 7.8.9
CVSS
7.7 (high)
Published
2025-10-06
Title
Cornerstone <= 7.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
6.4 (medium)
Published
2024-04-26
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 0.8.1
CVSS
6.1 (medium)
Published
2024-04-16
Title
Cornerstone < 0.8.1 - Reflected Cross-Site Scripting via PHP_SELF
Fixed in
Fixed in 0.8.1
CVSS
6.1 (medium)