WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
themeshark-elementor
Published
2024-10-31
Title
ThemeShark Templates & Widgets for Elementor <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-audio-dock
Published
2024-12-30
Title
Themify Audio Dock < 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-audio-dock
Published
2025-08-20
Title
Themify Audio Dock < 2.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
themify-builder
Published
2021-10-04
Title
Themify Builder < 5.3.2 - Reflected Cross-Site Scripting
Slug
themify-builder
Published
2024-02-05
Title
Themify Builder < 7.0.6 - Cross-Site Request Forgery
Slug
themify-builder
Published
2024-05-23
Title
Themify Builder < 7.5.8 - Open Redirect
Slug
themify-builder
Published
2024-08-21
Title
Themify Builder < 7.6.2 - Missing Authorization to Authenticated (Contributor+) Post Duplication
Slug
themify-builder
Published
2024-10-04
Title
Themify Builder < 7.6.3 - Reflected Cross-Site Scripting
Slug
themify-builder
Published
2024-11-13
Title
Themify Builder < 7.6.6 - Contributor+ Stored XSS
Slug
themify-builder
Published
2024-12-19
Title
Themify Builder < 7.6.5 - Authenticated (Contributor+) Local File Inclusion
Slug
themify-builder
Published
2025-01-21
Title
Themify Builder < 7.6.6 - Reflected Cross-Site Scripting
Slug
themify-builder
Published
2025-08-20
Title
Themify Builder < 7.6.8 - Missing Authorization
Slug
themify-builder
Published
2025-09-23
Title
Themify Builder < 7.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-builder
Published
2026-07-10
Title
Themify Builder < 7.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field
Slug
themify-builder
Published
2026-07-10
Title
Themify Builder < 7.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field
Slug
themify-builder
Published
2026-07-07
Title
Themify Builder < 7.7.5 - Unauthenticated Stored Cross-Site Scripting
Slug
themify-builder
Published
2026-07-15
Title
Themify Builder < 7.7.8 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action
Slug
themify-builder
Published
2026-08-21
Title
Themify Builder < 7.8.1 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action
Slug
themify-builder
Published
2026-09-24
Title
Themify Builder < 7.8.2 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter
Slug
themify-event-post
Published
2024-03-28
Title
Themify Event Post < 1.2.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
themify-event-post
Published
2025-03-27
Title
Themify Event Post < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-event-post
Published
2025-03-27
Title
Themify Event Post < 1.3.3 - Authenticated (Contributor+) Local File Inclusion
Slug
themify-event-post
Published
2026-03-08
Title
Themify Event Post < 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-icons
Published
2023-12-27
Title
Themify Icons < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-icons
Published
2025-08-20
Title
Themify Icons < 2.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting