Login Request a demo
TH
Vendor
ThemeHunk
17 products with CVEs on record
32
CVEs
0
On KEV
2
New 30D
Products
TS
Th Shop Mania
ThemeHunk
7.1
1 CVEs0 on KEV1 new
TC
ThemeHunk Customizer
ThemeHunk
7.1
1 CVEs0 on KEV1 new
CF
Contact Form & Lead Form Elementor Builder
ThemeHunk
7.1
7 CVEs0 on KEV0 new
WP
WP Popup Builder
Themehunk
9.8
4 CVEs0 on KEV0 new
AP
Advance Product Search
ThemeHunk
9.8
3 CVEs0 on KEV0 new
BS
Big Store
Themehunk
8.8
2 CVEs0 on KEV0 new
GB
Gutenberg Blocks
ThemeHunk
7.1
2 CVEs0 on KEV0 new
HC
Hunk Companion
Themehunk
9.8
2 CVEs0 on KEV0 new
MM
Mega Menu
Themehunk
5.4
2 CVEs0 on KEV0 new
AP
Advance Product Search- Voice & Ajax Search for WooCommerce
themehunk
7.5
1 CVEs0 on KEV0 new
LF
Lead Form Builder & Contact Form
themehunk
7.2
1 CVEs0 on KEV0 new
OS
Open Shop
themehunk
7.1
1 CVEs0 on KEV0 new
TA
TH Advance Product Search
Themehunk
9.8
1 CVEs0 on KEV0 new
TL
TH Login Registration
themehunk
6.3
1 CVEs0 on KEV0 new
VS
Variation Swatches
Themehunk
5.4
1 CVEs0 on KEV0 new
VB
Vayu Blocks
Themehunk
6.5
1 CVEs0 on KEV0 new
ZI
Zita
Themehunk
9.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111838
New
TC
ThemeHunk Customizer
ThemeHunk
7.1
0%
Oct 21WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105883
TS
Th Shop Mania
ThemeHunk
7.1
0%
Oct 9WordPress Th Shop Mania theme <= 1.9.1 - Broken Access Control vulnerability
CVE-2026-66607
AP
Advance Product Search
ThemeHunk
7.1
0%
Aug 20WordPress Advance Product Search plugin <= 1.4.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-12753
AP
Advance Product Search- Voice & Ajax Search for WooCommerce
themehunk
7.5
1%
Jul 16Advance Product Search- Voice & Ajax Search for WooCommerce <= 1.4.4 - Unauthenticated SQL Injection via 's' and 'match' Parameter
CVE-2026-57405
OS
Open Shop
themehunk
7.1
0%
Jul 13WordPress Open Shop theme <= 1.7.1 - Broken Access Control vulnerability
CVE-2026-14250
TL
TH Login Registration
themehunk
6.3
0%
Jul 8Themehunk Login Registration <= 1.0.2 - Unauthenticated Privilege Escalation via 'role' Parameter
CVE-2026-56070
AP
Advance Product Search
ThemeHunk
9.3
1%
Jun 26WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability
CVE-2023-25969
CF
Contact Form & Lead Form Elementor Builder
ThemeHunk
5.4
0%
Jun 11WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken Access Control vulnerability
CVE-2026-32532
CF
Contact Form & Lead Form Elementor Builder
ThemeHunk
7.1
0%
Mar 25WordPress Contact Form & Lead Form Elementor Builder plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25438
GB
Gutenberg Blocks
ThemeHunk
7.1
0%
Mar 19WordPress Gutenberg Blocks – Unlimited blocks For Gutenberg plugin <= 1.2.8 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-1454
LF
Lead Form Builder & Contact Form
themehunk
7.2
0%
Mar 11Responsive Contact Form Builder & Lead Generation Plugin <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
CVE-2025-62902
WP
WP Popup Builder
Themehunk
5.3
0%
Oct 27Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk WP Popup Builder wp-popup-builder allows Retrieve Embedded Sensitive…
CVE-2025-52816
ZI
Zita
Themehunk
9.8
1%
Jun 27Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themehunk Zita zita allows PHP Local File Inclusion.This…
CVE-2025-30990
MM
Mega Menu
Themehunk
5.4
0%
Jun 6Missing Authorization vulnerability in ThemeHunk ThemeHunk themehunk-megamenu-plus allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2024-10475
CF
Contact Form & Lead Form Elementor Builder
Themehunk
4.8
0%
May 15The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin before 1.9.8 does not sanitise and escape some of its settings, which could allow high privilege…
CVE-2025-22644
VB
Vayu Blocks
Themehunk
6.5
0%
Mar 27Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce…
CVE-2025-30881
BS
Big Store
Themehunk
5.4
0%
Mar 27Missing Authorization vulnerability in themehunk Big Store big-store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Big Store: from n/a…
CVE-2024-11972
HC
Hunk Companion
Themehunk
9.8
59%
Dec 31Hunk Companion < 1.9.0 - Unauthenticated Plugin Installation
CVE-2023-28688
VS
Variation Swatches
Themehunk
5.4
0%
Dec 9Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk TH Variation Swatches allows Cross Site Request Forgery.This issue affects TH Variation Swatches: from n/a through…
CVE-2024-9061
WP
WP Popup Builder
Themehunk
9.8
52%
Oct 16The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add…
CVE-2024-9707
HC
Hunk Companion
Themehunk
9.8
9%
Oct 11The Hunk Companion plugin for WordPress is vulnerable to unauthorized plugin installation/activation due to a missing capability check on the /wp-json/hc/v1/themehunk-import REST…
CVE-2024-8434
MM
Mega Menu
Themehunk
4.3
0%
Sep 25The Easy Mega Menu Plugin for WordPress – ThemeHunk plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions hooked via…
CVE-2024-44049
GB
Gutenberg Blocks
Themehunk
5.4
0%
Sep 17Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks unlimited-blocks.This issue affects Gutenberg…
CVE-2022-40218
AP
Advance Product Search
Themehunk
9.8
0%
May 8Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.1.4
CVE-2024-3637
CF
Contact Form & Lead Form Elementor Builder
Themehunk
6.1
0%
May 3The Responsive Contact Form Builder & Lead Generation Plugin WordPress plugin through 1.8.9 does not sanitise and escape some of its settings, which could allow high privilege…
CVE-2022-38057
TA
TH Advance Product Search
Themehunk
9.8
1%
Mar 25Missing Authorization vulnerability in ThemeHunk Advance WordPress Search Plugin.This issue affects Advance WordPress Search Plugin: from n/a through 1.2.1
CVE-2022-23180
CF
Contact Form & Lead Form Elementor Builder
Themehunk
4.3
1%
Jan 16The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.4 doesn't have authorisation and nonce checks, which could allow any authenticated users, such as…
CVE-2022-23179
CF
Contact Form & Lead Form Elementor Builder
Themehunk
4.8
1%
Jan 16The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.7.0 does not escape some of its form fields before outputting them in attributes, which could allow high…
CVE-2023-27431
BS
Big Store
Themehunk
8.8
0%
Nov 12Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions
CVE-2022-2405
WP
WP Popup Builder
Themehunk
4.3
0%
Sep 26The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete…
CVE-2022-2404
WP
WP Popup Builder
Themehunk
6.1
1%
Sep 26The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
CVE-2021-24967
CF
Contact Form & Lead Form Elementor Builder
Themehunk
6.1
1%
Dec 27The Contact Form & Lead Form Elementor Builder WordPress plugin before 1.6.4 does not sanitise and escape some lead values, which could allow unauthenticated users to perform…