WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
themify-popup
Published
2025-09-05
Title
Themify Popup < 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-popup
Published
2026-06-23
Title
Themify Popup < 1.4.4 - Authenticated (Contributor+) PHP Object Injection
Slug
themify-portfolio-post
Published
2020-12-04
Title
Themify Portfolio Post < 1.1.6 - Authenticated Stored Cross-Site Scripting
Slug
themify-portfolio-post
Published
2022-01-14
Title
Themify Portfolio Post < 1.1.7 - Reflected Cross-Site Scripting
Slug
themify-portfolio-post
Published
2022-12-23
Title
Themify Portfolio Post < 1.2.1 - Contributor+ Stored XSS
Slug
themify-portfolio-post
Published
2023-01-19
Title
Themify Portfolio Post < 1.2.2 - Contributor+ Stored XSS
Slug
themify-portfolio-post
Published
2023-04-18
Title
Themify Portfolio Post < 1.2.5 - Editor+ Stored XSS
Slug
themify-portfolio-post
Published
2025-12-15
Title
Themify Portfolio Post < 1.3.1 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
themify-ptb
Published
2024-04-09
Title
Post Type Builder < 2.1.4 - Subscriber+ Arbitrary Post/Page Creation
Slug
themify-ptb
Published
2024-04-09
Title
Post Type Builder < 2.1.1 - Reflected Cross-Site Scripting
Slug
themify-ptb-search
Published
2022-04-12
Title
Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting
Slug
themify-shortcodes
Published
2023-01-04
Title
Themify Shortcodes < 2.0.8 - Contributor+ Stored XSS via Shortcode
Slug
themify-shortcodes
Published
2024-03-25
Title
Themify Shortcodes < 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-shortcodes
Published
2024-05-08
Title
Themify Shortcodes < 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
Slug
themify-shortcodes
Published
2024-08-07
Title
Themify Shortcodes < 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-shortcodes
Published
2025-04-16
Title
Themify Shortcodes < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
themify-store-locator
Published
2024-12-12
Title
Themify Store Locator < 1.2.0 - Cross-Site Request Forgery
Slug
themify-wc-product-filter
Published
2022-05-18
Title
Themify - WooCommerce Product Filter < 1.3.8 - Reflected Cross-Site Scripting
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Reflected XSS
Slug
themify-wc-product-filter
Published
2024-03-11
Title
WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
Slug
themify-wc-product-filter
Published
2024-06-20
Title
Themify - WooCommerce Product Filter < 1.5.0 - Unauthenticated SQL Injection via conditions Parameter
Slug
themify-wc-product-filter
Published
2024-09-23
Title
Themify – WooCommerce Product Filter < 1.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
themify-wc-product-filter
Published
2026-09-10
Title
Themify – WooCommerce Product Filter < 1.5.6 - Reflected Cross-Site Scripting
Slug
theperfectweddingnl-widget
Published
2025-01-06
Title
ThePerfectWedding.nl Widget < 2.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting