Themify vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20248
3. 20265

Newest CVEs

• CVE-2026-56037

  WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability

  Themify · Themify Popup

  High8.8
• CVE-2025-31013

  WordPress Themify Folo theme <= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability

  Themify · Themify Folo

  High7.1
• CVE-2025-30996

  Arbitrary File Upload Vulnerability in WordPress themes by Themify

  Themify · Themify Sidepane WordPress Theme

  Critical9.9
• CVE-2025-31048

  WordPress Shopo <= 1.1.4 - Arbitrary File Upload Vulnerability

  Themify · Shopo

  Critical9.9
• CVE-2025-31047

  WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability

  Themify · Themify Edmin

  High8.8
• CVE-2024-43133

  WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

  Themify · Themify Shortcodes

  Medium6.5
• CVE-2023-46146

  WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability

  Themify · Themify Ultra

  High8.3
• CVE-2023-46148

  WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability

  Themify · Themify Ultra

  High8.8
• CVE-2023-46145

  WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability

  Themify · Themify Ultra

  High8.8
• CVE-2024-31366

  WordPress Post Type Builder (PTB) plugin <= 2.0.8 - Auth. Arbitrary Post/Page Creation vulnerability

  Themify · Post Type Builder (PTB)

  High7.1