MyThemeShop vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20232
3. 20242
4. 20255
5. 20263

Newest CVEs

• CVE-2026-66646

  WordPress WP Tab Widget plugin <= 1.2.11 - Cross Site Scripting (XSS) vulnerability

  MyThemeShop · WP Tab Widget

  Medium6.5
• CVE-2026-9635

  WP Shortcode by MyThemeShop <= 1.4.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'title' Shortcode Attribute

  mythemeshop · WP Shortcode by MyThemeShop

  Medium6.4
• CVE-2026-24522

  WordPress WP Subscribe plugin <= 1.2.16 - Broken Access Control vulnerability

  MyThemeShop · WP Subscribe

  Medium4.3
• CVE-2025-8425

  My WP Translate <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

  mythemeshop · My WP Translate

  High8.8
• CVE-2025-8423

  My WP Translate <= 1.1 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Option Read and Deletion

  mythemeshop · My WP Translate

  Medium5.4
• CVE-2025-2158

  WordPress Review Plugin: The Ultimate Solution for Building a Review Website <= 5.3.5 - Authenticated (Contributor+) Local File Inclusion via Post Custom Fields

  mythemeshop · WordPress Review Plugin: The Ultimate Solution for Building a Review Website

  High8.8
• CVE-2025-46482

  WordPress WP Quiz plugin <= 2.0.10 - Cross Site Scripting (XSS) vulnerability

  MyThemeShop · WP Quiz

  Medium6.5
• CVE-2024-37452

  WordPress Schema Lite theme <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability

  MyThemeShop · Schema Lite

  Medium4.3
• CVE-2024-37938

  WordPress SociallyViral theme <= 1.0.10 - Cross Site Request Forgery (CSRF) vulnerability

  MyThemeShop · SociallyViral

  Medium4.3
• CVE-2023-23896

  WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control

  MyThemeShop · URL Shortener by MyThemeShop

  Medium5.4