Login Request a demo
TP
Product
Themify Popup
by themifyme · last CVE Oct 17, 2026
2
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 0Medium 2Low 0
Severity
All severities2Critical0High0Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Themify Popup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58787
6.5
0%
Sep 5
WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.4.2
CVE-2026-109989
6.4
0%
Oct 17
Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter
Affected: through 1.4.7
Showing 2