ThemeLooks vulnerabilities

CVEs per yearBy the year they were published

1. 20248
2. 20254
3. 20262

Newest CVEs

• CVE-2026-11802

  FoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX Action

  themelooks · FoodBook Lite – Online Food Ordering System

  Medium5.3
• CVE-2026-25014

  WordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerability

  themelooks · Enter Addons

  Medium4.3
• CVE-2025-8687

  Enter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison Widgets

  themelooks · Enter Addons – Ultimate Template Builder for Elementor

  Medium6.4
• CVE-2025-60125

  WordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure Vulnerability

  themelooks · FoodBook

  Medium5.3
• CVE-2025-31847

  WordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability

  themelooks · mFolio Lite

  Medium6.5
• CVE-2024-56252

  WordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerability

  themelooks · Enter Addons

  Medium6.5
• CVE-2024-10868

  Enter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post Disclosure

  themelooks · Enter Addons – Ultimate Template Builder for Elementor

  Medium4.3
• CVE-2024-9307

  mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files

  themelooks · mFolio Lite

  Critical9.9
• CVE-2024-47625

  WordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

  themelooks · Enter Addons

  Medium6.5
• CVE-2024-7611

  Enter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card Widget

  themelooks · Enter Addons – Ultimate Template Builder for Elementor

  Medium6.4