WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
themify-portfolio-post
Published
2022-12-23
Title
Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSS
Slug
themify-portfolio-post
Published
2023-01-19
Title
Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSS
Slug
themify-portfolio-post
Published
2023-04-18
Title
Themify Portfolio Post < 1.2.5 - Editor+ Stored XSS
Slug
themify-portfolio-post
Published
2025-12-15
Title
Themify Portfolio Post < 1.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
themify-ptb
Published
2024-04-09
Title
Post Type Builder < 2.1.4 - Subscriber+ Arbitrary Post/Page Creation
Slug
themify-ptb
Published
2024-04-09
Title
Post Type Builder < 2.1.1 - Reflected Cross-Site Scripting
Slug
themify-ptb-search
Published
2022-04-12
Title
Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting
Slug
themify-shortcodes
Published
2023-01-04
Title
Themify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcode
Slug
themify-shortcodes
Published
2024-03-25
Title
Themify Shortcodes < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-shortcodes
Published
2024-05-08
Title
Themify Shortcodes < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
Slug
themify-shortcodes
Published
2024-08-07
Title
Themify Shortcodes < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-shortcodes
Published
2025-04-16
Title
Themify Shortcodes < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-store-locator
Published
2024-12-12
Title
Themify Store Locator < 1.2.0 - Cross-Site Request Forgery
Slug
themify-wc-product-filter
Published
2022-05-18
Title
Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Reflected XSS
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
Slug
themify-wc-product-filter
Published
2024-06-20
Title
Themify - WooCommerce Product Filter < 1.5.0 - Unauthenticated SQL Injection via conditions Parameter
Slug
themify-wc-product-filter
Published
2024-09-23
Title
Themify – WooCommerce Product Filter < 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
theperfectweddingnl-widget
Published
2025-01-06
Title
ThePerfectWedding.nl Widget < 2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
theplus_elementor_addon
Published
2021-03-08
Title
The Plus Addons for Elementor Page Builder < 4.1.7 - Authentication Bypass
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor < 4.1.12 - Reflected Cross-Site Scripting (XSS)
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.11 - Arbitrary Reset Pwd Email Sending
Slug
theplus_elementor_addon
Published
2021-05-31
Title
The Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect
Slug
theplus_elementor_addon
Published
2021-12-13
Title
The Plus Addons for Elementor Pro < 5.0.7 - Sensitive Data Disclosure