ThemeHunk vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202415
3. 202510
4. 202613

Newest CVEs

• CVE-2026-111838

  WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability

  ThemeHunk · ThemeHunk Customizer

  High7.1
• CVE-2026-105883

  WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability

  ThemeHunk · Th Shop Mania

  High7.1
• CVE-2026-66607

  WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability

  ThemeHunk · Advance Product Search

  High7.1
• CVE-2026-12753

  Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter

  themehunk · Advance Product Search- Voice & Ajax Search for WooCommerce

  High7.5
• CVE-2026-57405

  WordPress Open Shop theme <= 1.7.1 - Broken Access Control vulnerability

  themehunk · Open Shop

  High7.1
• CVE-2026-14250

  Themehunk Login Registration <= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameter

  themehunk · TH Login Registration

  Medium6.3
• CVE-2026-56070

  WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability

  ThemeHunk · Advance Product Search

  Critical9.3
• CVE-2023-25969

  WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability

  ThemeHunk · Contact Form & Lead Form Elementor Builder

  Medium5.4
• CVE-2026-32532

  WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

  ThemeHunk · Contact Form & Lead Form Elementor Builder

  High7.1
• CVE-2026-25438

  WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability

  ThemeHunk · Gutenberg Blocks

  High7.1