Login Request a demo
TH
Vendor
Themegrill
16 products with CVEs on record
36
CVEs
0
On KEV
9
New 30D
Products
UR
User Registration
Themegrill
7.5
10 CVEs0 on KEV8 new
ES
eStore
ThemeGrill
7.1
1 CVEs0 on KEV1 new
MA
Masteriyo
Themegrill
9.8
3 CVEs0 on KEV0 new
ML
Masteriyo - LMS
ThemeGrill
8.8
3 CVEs0 on KEV0 new
TD
ThemeGrill Demo Importer
ThemeGrill
9.1
3 CVEs0 on KEV0 new
CO
ColorMag
themegrill
6.5
2 CVEs0 on KEV0 new
MB
Magazine Blocks
ThemeGrill
6.5
2 CVEs0 on KEV0 new
MP
Maintenance Page
Themegrill
5.3
2 CVEs0 on KEV0 new
UR
User Registration Stripe
ThemeGrill
8.2
2 CVEs0 on KEV0 new
ZA
Zakra
themegrill
6.4
2 CVEs0 on KEV0 new
AC
Accelerate
themegrill
4.3
1 CVEs0 on KEV0 new
ES
Esteem
Themegrill
6.1
1 CVEs0 on KEV0 new
HI
Himalayas
Themegrill
4.8
1 CVEs0 on KEV0 new
RF
Registration Form for WooCommerce
ThemeGrill
9.8
1 CVEs0 on KEV0 new
SM
SmartSMTP
ThemeGrill
7.1
1 CVEs0 on KEV0 new
SP
Spacious
themegrill
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-108485
ES
eStore
ThemeGrill
7.1
0%
Oct 18WordPress eStore theme <= 1.6.13 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105882
UR
User Registration
ThemeGrill
6.5
0%
Oct 15WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-109692
UR
User Registration
ThemeGrill
7.1
0%
Oct 15WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
CVE-2026-109699
UR
User Registration
ThemeGrill
5.4
0%
Oct 13WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
CVE-2026-106598
UR
User Registration
ThemeGrill
5.3
0%
Oct 13WordPress User Registration plugin <= 5.2.8 - Sensitive Data Exposure vulnerability
CVE-2026-105881
UR
User Registration
ThemeGrill
6.5
0%
Oct 13WordPress User Registration plugin <= 5.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-103076
UR
User Registration
ThemeGrill
5.4
0%
Oct 13WordPress User Registration plugin <= 5.2.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-106597
UR
User Registration
ThemeGrill
5.3
0%
Oct 13WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerability
CVE-2026-96334
UR
User Registration
ThemeGrill
5.6
0%
Oct 9WordPress User Registration plugin <= 5.2.7 - Broken Access Control vulnerability
CVE-2026-78290
MB
Magazine Blocks
ThemeGrill
6.5
0%
Aug 24WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66606
SM
SmartSMTP
ThemeGrill
7.1
0%
Aug 20WordPress SmartSMTP plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-9266
AC
Accelerate
themegrill
4.3
0%
Aug 6Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
CVE-2026-4804
ZA
Zakra
themegrill
6.4
0%
Jul 3Zakra <= 4.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta REST API
CVE-2026-52701
UR
User Registration
Themegrill
6.5
0%
Jun 26WordPress User Registration plugin <= 5.2.2 - Broken Access Control vulnerability
CVE-2026-54807
RF
Registration Form for WooCommerce
ThemeGrill
9.8
0%
Jun 17WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability
CVE-2026-49081
UR
User Registration Stripe
ThemeGrill
8.2
0%
Jun 17WordPress User Registration Stripe plugin <= 1.3.12 - Broken Access Control vulnerability
CVE-2026-40726
UR
User Registration Stripe
ThemeGrill
8.2
0%
Jun 17WordPress User Registration Stripe plugin <= 1.3.14 - Broken Access Control vulnerability
CVE-2026-42743
ML
Masteriyo - LMS
ThemeGrill
6.5
0%
Jun 15WordPress Masteriyo - LMS plugin <= 2.1.8 - Broken Authentication vulnerability
CVE-2026-39524
ML
Masteriyo - LMS
ThemeGrill
7.5
0%
Jun 15WordPress Masteriyo - LMS plugin <= 2.1.5 - Payment Bypass vulnerability
CVE-2026-25425
UR
User Registration
ThemeGrill
7.5
0%
Jun 15WordPress User Registration plugin <= 5.1.2 - Broken Access Control vulnerability
CVE-2026-49111
ML
Masteriyo - LMS
ThemeGrill
8.8
0%
Jun 15WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability
CVE-2026-40730
TD
ThemeGrill Demo Importer
ThemeGrill
5.3
0%
Apr 15WordPress ThemeGrill Demo Importer plugin <= 2.0.0.6 - Broken Access Control vulnerability
CVE-2025-9331
SP
Spacious
themegrill
4.3
0%
Aug 22Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import
CVE-2025-9202
CO
ColorMag
themegrill
4.3
0%
Aug 20ColorMag <= 4.0.19 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation
CVE-2025-8595
ZA
Zakra
themegrill
4.3
0%
Aug 6Zakra <= 4.1.5 - Missing Authorization to Subscriber+ Demo Import
CVE-2024-33939
MA
Masteriyo
Themegrill
5.3
1%
May 19WordPress LMS by Masteriyo plugin <= 1.7.3 - Broken Authentication vulnerability
CVE-2024-9218
MB
Magazine Blocks
Themegrill
6.1
0%
Oct 2The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to Reflected Cross-Site…
CVE-2024-39629
HI
Himalayas
Themegrill
4.8
0%
Aug 1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Himalayas allows Stored XSS.This issue affects Himalayas:…
CVE-2024-37432
ES
Esteem
Themegrill
6.1
0%
Jul 22Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeGrill Esteem allows Stored XSS.This issue affects Esteem: from…
CVE-2024-24882
MA
Masteriyo
Themegrill
9.8
2%
May 17Incorrect Privilege Assignment vulnerability in masteriyo Masteriyo - LMS learning-management-system.This issue affects Masteriyo - LMS: from n/a through <= 1.7.2
CVE-2024-1462
MP
Maintenance Page
Themegrill
5.3
1%
Mar 13The Maintenance Page plugin for WordPress is vulnerable to Basic Information Exposure in all versions up to, and including, 1.0.8 via the REST API
CVE-2024-1370
MP
Maintenance Page
Themegrill
4.3
0%
Mar 13The Maintenance Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the subscribe_download function hooked via AJAX action…
CVE-2024-0679
CO
Colormag
Themegrill
6.5
1%
Jan 20The ColorMag theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the plugin_action_callback() function in all versions up to, and…
CVE-2023-3345
MA
Masteriyo
Themegrill
6.5
2%
Jul 31The LMS by Masteriyo WordPress plugin before 1.6.8 does not have proper authorization in one some of its REST API endpoints, making it possible for any students to retrieve email…
CVE-2020-36334
TD
Themegrill Demo Importer
Themegrill
8.8
1%
May 5themegrill-demo-importer before 1.6.3 allows CSRF, as demonstrated by wiping the database
CVE-2020-36333
TD
Themegrill Demo Importer
Themegrill
9.1
4%
May 5themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook