Themeisle vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 202310
3. 202444
4. 202527
5. 202641

Newest CVEs

• CVE-2026-121519

  Social Slider Feed <= 2.3.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'slidespeed' Parameter

  themeisle · Social Slider Feed – Social Media Feed & Gallery Widgets

  Medium6.4
• CVE-2026-120035

  RSS Aggregator by Feedzy <= 5.2.13 - Unauthenticated Stored Cross-Site Scripting via Feed Item Title

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  Medium5.4
• CVE-2026-120659

  Redirection for Contact Form 7 <= 3.2.14 - Missing Authorization to Unauthenticated Arbitrary Post Meta Modification and Arbitrary File Copy via 'wpcf7-redirect' Parameter

  themeisle · Redirection for Contact Form 7

  Medium5.3
• CVE-2026-119054

  Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url

  Themeisle · Multiple Pages Generator by Themeisle

  Medium5.1
• CVE-2026-110707

  RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  Medium4.7
• CVE-2026-109207

  RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  High7.2
• CVE-2026-104801

  PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

  themeisle · PPOM – Product Addons & Custom Fields for WooCommerce

  Critical9.1
• CVE-2026-104735

  RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  Medium6.4
• CVE-2026-97305

  WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

  Themeisle · AI Chatbot for WordPress – Hyve Lite

  Medium6.9
• CVE-2026-102002

  Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget

  themeisle · Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

  Low3.1