📦 Civi

by Uxper

🔍 What is Civi?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2024-13771

CRITICAL CVSS 9.8 Mar 14, 2025

This vulnerability allows unauthenticated attackers to reset passwords for any user account in the Civi WordPress theme, including administrators, by exploiting insufficient user validation. All WordP...

CVE-2024-13773

HIGH CVSS 7.3 Mar 14, 2025

The Civi WordPress theme contains hard-coded LinkedIn API credentials in all versions up to 2.1.4, allowing unauthenticated attackers to extract sensitive authentication keys. This affects all WordPre...