themifyme vulnerabilities

CVEs per yearBy the year they were published

1. 20249
2. 202511
3. 202613

Newest CVEs

• CVE-2026-115869

  Themify Builder <= 7.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'variations' Repeater Field

  themifyme · Themify Builder

  Medium6.4
• CVE-2026-109989

  Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter

  themifyme · Themify Popup

  Medium6.4
• CVE-2026-111726

  Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute

  themifyme · Themify Builder

  Medium6.4
• CVE-2026-96831

  WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability

  themifyme · Themify Builder

  High8.8
• CVE-2026-95864

  Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter

  themifyme · Themify Builder

  High7.2
• CVE-2026-78172

  Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting

  themifyme · Themify – WooCommerce Product Filter

  Medium6.1
• CVE-2026-75027

  Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action

  themifyme · Themify Builder

  Medium5.3
• CVE-2026-15407

  Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action

  themifyme · Themify Builder

  Medium4.3
• CVE-2026-57369

  WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability

  themifyme · Themify Builder

  High7.1
• CVE-2026-15096

  Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field

  themifyme · Themify Builder

  Medium6.4