Login Request a demo
TH
Vendor
Themeisle
41 products with CVEs on record
121
CVEs
0
On KEV
7
New 30D
Products
PP
PPOM – Product Addons & Custom Fields for WooCommerce
themeisle
9.8
3 CVEs0 on KEV1 new
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
7.2
6 CVEs0 on KEV2 new
WF
WP Full Stripe Free
Themeisle
7.6
4 CVEs0 on KEV1 new
OB
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
themeisle
7.5
3 CVEs0 on KEV1 new
AC
AI Chatbot for WordPress – Hyve Lite
Themeisle
6.9
1 CVEs0 on KEV1 new
MP
MPG
Themeisle
5.3
1 CVEs0 on KEV1 new
OF
Orbit Fox
Themeisle
6.5
15 CVEs0 on KEV0 new
MP
Multiple Page Generator
Themeisle
9.8
10 CVEs0 on KEV0 new
OB
Otter Blocks
Themeisle
7.5
10 CVEs0 on KEV0 new
RA
Rss Aggregator BY Feedzy
Themeisle
8.8
9 CVEs0 on KEV0 new
VI
Visualizer
Themeisle
10.0
9 CVEs0 on KEV0 new
RF
Redirection for Contact Form 7
themeisle
8.8
6 CVEs0 on KEV0 new
OF
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
themeisle
6.4
4 CVEs0 on KEV0 new
PA
Product Addons & Fields For Woocommerce
Themeisle
9.8
4 CVEs0 on KEV0 new
OF
Orbit Fox by ThemeIsle
Themeisle
6.5
3 CVEs0 on KEV0 new
VT
Visualizer: Tables and Charts Manager for WordPress
themeisle
6.5
3 CVEs0 on KEV0 new
AF
Auto Featured Image (Auto Post Thumbnail)
themeisle
4.9
2 CVEs0 on KEV0 new
HE
Hestia
themeisle
5.3
2 CVEs0 on KEV0 new
PF
PPOM for WooCommerce
Themeisle
6.5
2 CVEs0 on KEV0 new
SP
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
themeisle
7.5
2 CVEs0 on KEV0 new
VT
Visualizer – Tables & Charts Manager with Built-in AI Generator
themeisle
7.5
2 CVEs0 on KEV0 new
CT
Cloud Templates & Patterns Collection
Themeisle
7.5
1 CVEs0 on KEV0 new
CT
Cyr to Lat reloaded – transliteration of links and file names
Themeisle
4.3
1 CVEs0 on KEV0 new
CY
Cyrlitera
Themeisle
4.3
1 CVEs0 on KEV0 new
DA
Disable Admin Notices – Hide Dashboard Notifications
themeisle
4.3
1 CVEs0 on KEV0 new
DC
Disable Comments for Any Post Types (Remove comments)
Themeisle
7.1
1 CVEs0 on KEV0 new
FE
Feedzy
Themeisle
4.9
1 CVEs0 on KEV0 new
GM
Google Maps Plugin BY Intergeo
Themeisle
5.4
1 CVEs0 on KEV0 new
LI
Lightstart
Themeisle
4.3
1 CVEs0 on KEV0 new
ML
Masteriyo LMS PRO
Themeisle
9.8
1 CVEs0 on KEV0 new
MI
Menu Icons by ThemeIsle
themeisle
6.4
1 CVEs0 on KEV0 new
MM
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO
themeisle
6.5
1 CVEs0 on KEV0 new
NP
Neve PRO
Themeisle
6.5
1 CVEs0 on KEV0 new
OR
Orbitfox
Themeisle
4.3
1 CVEs0 on KEV0 new
OT
Otter
Themeisle
8.8
1 CVEs0 on KEV0 new
OG
Otter - Gutenberg Block
Themeisle
7.5
1 CVEs0 on KEV0 new
RI
Robin Image Optimizer – Unlimited Image Optimization & WebP Converter
themeisle
6.4
1 CVEs0 on KEV0 new
SS
Social Slider Feed
Themeisle
7.1
1 CVEs0 on KEV0 new
WA
Woody ad snippets
Themeisle
9.9
1 CVEs0 on KEV0 new
WC
Woody Code Snippets
Themeisle
9.8
1 CVEs0 on KEV0 new
WM
WP Maintenance Mode & Coming Soon
Themeisle
6.5
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109207
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
7.2
0%
Oct 16RSS Aggregator by Feedzy <= 5.2.11 - Unauthenticated Stored Cross-Site Scripting via RSS media:thumbnail URL
CVE-2026-104801
PP
PPOM – Product Addons & Custom Fields for WooCommerce
themeisle
9.1
1%
Oct 10PPOM <= 34.0.10 - Unauthenticated Arbitrary File Deletion via 'ppom[fields][<data_name>][n][org]' Parameter
CVE-2026-104735
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
6.4
0%
Oct 10RSS Aggregator by Feedzy <= 5.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Feedzy Loop Block Feed URL / RSS <title>
CVE-2026-97305
AC
AI Chatbot for WordPress – Hyve Lite
Themeisle
6.9
0%
Oct 5WordPress AI Chatbot for WordPress – Hyve Lite plugin <= 2.0.2 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-102002
OB
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
themeisle
3.1
0%
Oct 2Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
CVE-2026-62073
WF
WP Full Stripe Free
Themeisle
7.5
0%
Oct 1WordPress WP Full Stripe Free plugin <= 8.5.6 - Broken Access Control vulnerability
CVE-2026-97302
MP
MPG
Themeisle
5.3
0%
Sep 30WordPress MPG plugin <= 4.2.3 - Sensitive Data Exposure vulnerability
CVE-2026-85198
MM
MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO
themeisle
6.5
0%
Sep 12MPG <= 4.2.1 - Unauthenticated SQL Injection via URL Path
CVE-2026-4945
OB
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
themeisle
5.3
0%
Sep 7Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass
CVE-2026-61960
WF
WP Full Stripe Free
Themeisle
7.1
0%
Aug 13WordPress WP Full Stripe Free plugin <= 8.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-66437
FE
Feedzy
Themeisle
4.9
0%
Jul 27WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-65563
OF
Orbit Fox by ThemeIsle
Themeisle
5.9
0%
Jul 27WordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-15653
VT
Visualizer – Tables & Charts Manager with Built-in AI Generator
themeisle
6.4
0%
Jul 24Visualizer <= 4.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'backend-title' Parameter
CVE-2026-65537
CT
Cyr to Lat reloaded – transliteration of links and file names
Themeisle
4.3
0%
Jul 23WordPress Cyr to Lat reloaded – transliteration of links and file names plugin <= 1.3.3 - Broken Access Control vulnerability
CVE-2026-65526
VI
Visualizer
Themeisle
8.5
0%
Jul 23WordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerability
CVE-2026-61970
AF
Auto Featured Image (Auto Post Thumbnail)
Themeisle
4.9
0%
Jul 13WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-13252
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
6.4
0%
Jul 2RSS Aggregator by Feedzy <= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'aspectRatio' Attribute
CVE-2026-13468
VT
Visualizer – Tables & Charts Manager with Built-in AI Generator
themeisle
7.5
1%
Jul 1Visualizer <= 4.0.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via /visualizer/v1/action/{chart}/{type}/ REST Endpoint
CVE-2026-12432
SP
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
themeisle
5.3
1%
Jun 27Stripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter
CVE-2026-57618
NP
Neve PRO
Themeisle
6.5
0%
Jun 26WordPress Neve PRO theme <= 3.1.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-56050
PF
PPOM for WooCommerce
Themeisle
6.5
0%
Jun 25WordPress PPOM for WooCommerce plugin <= 33.0.18 - Broken Access Control vulnerability
CVE-2026-11358
OF
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
themeisle
4.4
0%
Jun 18Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More <= 3.0.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'menu-item-icon' Parameter
CVE-2026-42378
WF
WP Full Stripe Free
Themeisle
6.5
0%
Jun 15WordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerability
CVE-2026-39507
SS
Social Slider Feed
Themeisle
7.1
0%
Jun 15WordPress Social Slider Feed plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-23970
RF
Redirection for Contact Form 7
Themeisle
7.1
0%
Jun 15WordPress Redirection for Contact Form 7 plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
CVE-2017-20251
WC
Woody Code Snippets
Themeisle
9.8
1%
Jun 9WordPress Insert PHP Plugin 4.7.0 PHP Code Injection via REST API
CVE-2026-8976
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
4.3
0%
Jun 5RSS Aggregator by Feedzy <= 5.1.7 - Missing Authorization to Authenticated (Contributor+) Import Job Creation, Execution, Purge, Log Clearing, and Information Disclosure via Multiple AJAX Sub-Actions
CVE-2025-53209
ML
Masteriyo LMS PRO
Themeisle
9.8
0%
Jun 2WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability
CVE-2026-8689
VT
Visualizer: Tables and Charts Manager for WordPress
themeisle
4.3
0%
May 28Visualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() Functions
CVE-2026-42749
DC
Disable Comments for Any Post Types (Remove comments)
Themeisle
7.1
0%
May 27WordPress Disable Comments for Any Post Types (Remove comments) plugin <= 1.3.0 - Broken Authentication vulnerability
CVE-2026-24573
VI
Visualizer
Themeisle
6.5
0%
May 20WordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-2892
OB
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
themeisle
7.5
0%
Apr 30Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie
CVE-2026-25366
WA
Woody ad snippets
Themeisle
9.9
0%
Mar 25WordPress Woody ad snippets plugin <= 2.7.1 - Remote Code Execution (RCE) vulnerability
CVE-2026-2410
DA
Disable Admin Notices – Hide Dashboard Notifications
themeisle
4.3
0%
Feb 25Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update
CVE-2026-1319
RI
Robin Image Optimizer – Unlimited Image Optimization & WebP Converter
themeisle
6.4
0%
Feb 5Robin Image Optimizer <= 2.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Image Alternative Text Field
CVE-2026-1755
MI
Menu Icons by ThemeIsle
themeisle
6.4
0%
Feb 3Menu Icons by ThemeIsle <= 0.13.20 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2025-14800
RF
Redirection for Contact Form 7
themeisle
8.1
0%
Dec 21Redirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_upload
CVE-2025-13794
AF
Auto Featured Image (Auto Post Thumbnail)
themeisle
4.3
0%
Dec 16Auto Featured Image <= 4.2.1 - Missing Authorization to Authenticated (Contributor+) Post Thumbnail Modification
CVE-2025-11467
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
5.8
0%
Dec 11RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator <= 5.1.1 - Unauthenticated Blind Server-Side Request Forgery
CVE-2025-12483
VT
Visualizer: Tables and Charts Manager for WordPress
themeisle
6.5
0%
Dec 2Visualizer: Tables and Charts Manager for WordPress <= 3.11.12 - Authenticated (Contributor+) SQL Injection
CVE-2025-66069
PF
PPOM for WooCommerce
Themeisle
4.3
0%
Nov 21WordPress PPOM for WooCommerce plugin <= 33.0.16 - Broken Access Control vulnerability
CVE-2025-12045
OF
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
themeisle
6.4
0%
Nov 4Orbit Fox Companion <= 3.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via Post Taxonomy
CVE-2025-9322
SP
Stripe Payment Forms by WP Full Pay – Accept Credit Card Payments, Donations & Subscriptions
themeisle
7.5
0%
Oct 25Stripe Payment Forms <= 8.3.1 - Unauthenticated SQL Injection
CVE-2025-11128
RA
RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator
themeisle
5.0
0%
Oct 23Feedzy RSS Feeds Lite <= 5.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2025-11691
PP
PPOM – Product Addons & Custom Fields for WooCommerce
themeisle
7.5
0%
Oct 18PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated SQL Injection
CVE-2025-11391
PP
PPOM – Product Addons & Custom Fields for WooCommerce
themeisle
9.8
1%
Oct 18PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload
CVE-2025-9562
RF
Redirection for Contact Form 7
themeisle
6.4
0%
Oct 18Redirection for Contact Form 7 <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via qs_date Shortcode
CVE-2025-58789
WF
WP Full Stripe Free
Themeisle
7.6
0%
Sep 5WordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection Vulnerability
CVE-2025-58593
OF
Orbit Fox by ThemeIsle
Themeisle
6.5
0%
Sep 3WordPress Orbit Fox by ThemeIsle Plugin <= 3.0.0 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-55715
OG
Otter - Gutenberg Block
Themeisle
7.5
0%
Aug 20WordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability
CVE-2025-8141
RF
Redirection for Contact Form 7
themeisle
8.8
1%
Aug 20Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated Arbitrary File Deletion
CVE-2025-8289
RF
Redirection for Contact Form 7
themeisle
7.5
0%
Aug 20Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR Deserialization
CVE-2025-8145
RF
Redirection for Contact Form 7
themeisle
8.8
1%
Aug 20Redirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection
CVE-2025-53986
HE
Hestia
themeisle
5.3
0%
Jul 16WordPress Hestia theme <= 3.2.10 - Broken Access Control Vulnerability
CVE-2025-53254
CY
Cyrlitera
Themeisle
4.3
0%
Jun 27WordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-22659
OF
Orbit Fox by ThemeIsle
Themeisle
5.4
0%
Mar 27WordPress Orbit Fox by ThemeIsle plugin <= 2.10.44 - Cross Site Scripting (XSS) vulnerability
CVE-2025-1065
VT
Visualizer: Tables and Charts Manager for WordPress
themeisle
6.4
0%
Feb 19Visualizer: Tables and Charts Manager for WordPress <= 3.11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Import Data From File
CVE-2024-10705
MP
Multiple Page Generator
Themeisle
8.1
0%
Jan 26The Multiple Page Generator Plugin – MPG plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.5 via the…
CVE-2024-13183
OF
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
themeisle
5.4
0%
Jan 10Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag Parameter
CVE-2025-0311
OF
Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More
themeisle
5.4
0%
Jan 10Orbit Fox by ThemeIsle <= 2.10.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pricing Table Widget