# CVEs published 2011-09-28

16 CVEs were published on September 28, 2011: 0 critical, 0 high. Days are UTC.

- [CVE-2011-3850](https://cve.now/CVE-2011-3850.md): Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2011-3851](https://cve.now/CVE-2011-3851.md): Cross-site scripting (XSS) vulnerability in the News theme before 0.2 for WordPress allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2011-3852](https://cve.now/CVE-2011-3852.md): Cross-site scripting (XSS) vulnerability in the EvoLve theme before 1.2.6 for WordPress allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2011-3853](https://cve.now/CVE-2011-3853.md): Cross-site scripting (XSS) vulnerability in the Hybrid theme before 0.10 for WordPress allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2011-3854](https://cve.now/CVE-2011-3854.md): Cross-site scripting (XSS) vulnerability in the ZenLite theme before 4.4 for WordPress allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2011-3855](https://cve.now/CVE-2011-3855.md): Cross-site scripting (XSS) vulnerability in the F8 Lite theme before 4.2.2 for WordPress allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2011-3856](https://cve.now/CVE-2011-3856.md): Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme before 1.0.4 for WordPress allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2011-3857](https://cve.now/CVE-2011-3857.md): Cross-site scripting (XSS) vulnerability in the Antisnews theme before 1.10 for WordPress allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2011-3858](https://cve.now/CVE-2011-3858.md): Cross-site scripting (XSS) vulnerability in the Pixiv Custom theme before 2.1.6 for WordPress allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2011-3859](https://cve.now/CVE-2011-3859.md): Cross-site scripting (XSS) vulnerability in the Trending theme before 0.2 for WordPress allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2011-3860](https://cve.now/CVE-2011-3860.md): Cross-site scripting (XSS) vulnerability in the Cover WP theme before 1.6.6 for WordPress allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2011-3861](https://cve.now/CVE-2011-3861.md): Cross-site scripting (XSS) vulnerability in the Web Minimalist 200901 theme before 1.2 for WordPress allows remote attackers to inject arbit (no CVSS)
- [CVE-2011-3862](https://cve.now/CVE-2011-3862.md): Cross-site scripting (XSS) vulnerability in the Morning Coffee theme before 3.6 for WordPress allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2011-3863](https://cve.now/CVE-2011-3863.md): Cross-site scripting (XSS) vulnerability in the RedLine theme before 1.66 for WordPress allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2011-3864](https://cve.now/CVE-2011-3864.md): Cross-site scripting (XSS) vulnerability in the The Erudite theme before 2.7.9 for WordPress allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2011-3865](https://cve.now/CVE-2011-3865.md): Cross-site scripting (XSS) vulnerability in the Black-LetterHead theme before 1.6 for WordPress allows remote attackers to inject arbitrary (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2011-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.