Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-06-17
Spice Starter Sites - Broken Access Control (CVE-2024-8430)
The Spice Starter Sites plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the spice_starter_sites_importer_creater function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to import demo content.
PLUGIN
Spice Starter Sites
CVE-2024-8430
Risk Score
Threat Entry
Updated 2026-06-17
Spice Starter Sites - Cross-Site Scripting (XSS) (CVE-2024-44003)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spicethemes Spice Starter Sites spice-starter-sites allows Reflected XSS.This issue affects Spice Starter Sites: from n/a through
PLUGIN
Spice Starter Sites
CVE-2024-44003
Risk Score