Themeisle vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 202310
3. 202444
4. 202527
5. 202638

Newest CVEs

• CVE-2026-119054

  Multiple Pages Generator by Themeisle before 4.2.5 Stored XSS via Shortcode base-url

  Themeisle · Multiple Pages Generator by Themeisle

  Medium5.1
• CVE-2026-110707

  RSS Aggregator by Feedzy <= 5.2.12 - Unauthenticated Stored Cross-Site Scripting via YouTube media:description Feed Element

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  Medium4.7
• CVE-2026-109207

  RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  High7.2
• CVE-2026-104801

  PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter

  themeisle · PPOM – Product Addons & Custom Fields for WooCommerce

  Critical9.1
• CVE-2026-104735

  RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>

  themeisle · RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator

  Medium6.4
• CVE-2026-97305

  WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability

  Themeisle · AI Chatbot for WordPress – Hyve Lite

  Medium6.9
• CVE-2026-102002

  Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget

  themeisle · Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

  Low3.1
• CVE-2026-62073

  WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability

  Themeisle · WP Full Stripe Free

  High7.5
• CVE-2026-97302

  WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability

  Themeisle · MPG

  Medium5.3
• CVE-2026-85198

  MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path

  themeisle · MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO

  Medium6.5