Themes Vulnerabilities

Archin 3.2 - hades_framework/option_panel/ajax.php Configuration Option Manipulation

Description

The archin WordPress theme was affected by a hades_framework/option_panel/ajax.php Configuration Option Manipulation security vulnerability.

Affects Themes

archin
No known fix

References

Exploitdb
21646

Classification

Type
RCE
OWASP top 10
A1: Injection
CWE
CWE-94

Miscellaneous

Verified
No
WPVDB ID
84bdfeac-4805-409d-aeeb-e2fd1aedf27a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2024-10-24
Title
WordPress Meta Data and Taxonomies Filter (MDTF) < 1.3.3.5 - Unauthenticated Arbitrary Shortcode Execution
Published
2025-08-24
Title
WP Last Modified Info < 1.9.5 - Authenticated (Contributor+) Remote Code Execution
Published
2025-09-05
Title
Job Board Manager <= 2.1.61 - Authenticated (Job Poster+) Arbitrary Shortcode Execution
Published
2026-04-20
Title
Slider, Gallery, and Carousel by MetaSlider < 3.107.0 - Editor+ Remote Code Execution
Published
2025-08-14
Title
Dynamic Pricing With Discount Rules for WooCommerce < 4.5.10 - Authenticated (Shop Manager+) Arbitrary Code Execution