Login Request a demo
TH
Vendor
Themekraft
9 products with CVEs on record
37
CVEs
0
On KEV
0
New 30D
Products
BU
BuddyForms
Themekraft
9.8
12 CVEs0 on KEV0 new
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
8.8
7 CVEs0 on KEV0 new
BW
Buddypress Woocommerce MY Account Integration
Themekraft
8.8
4 CVEs0 on KEV0 new
BW
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
themekraft
8.8
4 CVEs0 on KEV0 new
PF
Post Form
Themekraft
8.2
3 CVEs0 on KEV0 new
PF
Post Form Registration Form Profile Form For User Profiles And Content Forms
Themekraft
8.8
3 CVEs0 on KEV0 new
WO
WooBuddy
ThemeKraft
8.8
2 CVEs0 on KEV0 new
AI
All in One Invite Codes
themekraft
6.3
1 CVEs0 on KEV0 new
TG
TK Google Fonts GDPR Compliant
ThemeKraft
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-81785
BU
BuddyForms
Themekraft
6.5
0%
Sep 10WordPress BuddyForms plugin <= 2.9.0 - Broken Access Control vulnerability
CVE-2025-62973
BU
BuddyForms
Themekraft
5.3
0%
Oct 27WordPress BuddyForms plugin <= 2.10.2 - Broken Access Control vulnerability
CVE-2025-32151
BU
BuddyForms
Themekraft
8.8
1%
Apr 4WordPress BuddyForms plugin <= 2.10.2 - Local File Inclusion vulnerability
CVE-2025-1780
BW
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
themekraft
4.3
0%
Mar 1BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.25 - Cross-Site Request Forgery to Limited Settings Update
CVE-2024-13358
BW
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
themekraft
4.3
0%
Mar 1BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.24 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
CVE-2024-12038
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
5.4
0%
Feb 22Frontend Content Forms for User Submissions (UGC) <= 2.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'buddyforms_nav' Shortcode
CVE-2024-12037
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
6.4
0%
Jan 31Frontend Content Forms for User Submissions (UGC) <= 2.8.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2022-4974
AI
All in One Invite Codes
themekraft
6.3
0%
Oct 16Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-47377
BU
BuddyForms
Themekraft
5.4
0%
Oct 5WordPress BuddyForms plugin <= 2.8.12 - Cross Site Scripting (XSS) vulnerability
CVE-2024-8246
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
8.8
0%
Sep 14Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.11 - Authenticated (Contributor+) Privilege Escalation
CVE-2024-35726
WO
WooBuddy
ThemeKraft
8.8
0%
Jun 10WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability
CVE-2024-5149
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
5.3
0%
Jun 5BuddyForms <= 2.8.9 - Email Verification Bypass due to Insufficient Randomness
CVE-2024-32830
BU
BuddyForms
ThemeKraft
7.5
1%
May 17WordPress buddyforms plugin <= 2.8.8- Arbitrary File Read and SSRF vulnerability
CVE-2024-32603
WO
WooBuddy
ThemeKraft
8.8
1%
Apr 18WordPress WooBuddy plugin <= 3.4.20 - PHP Object Injection vulnerability
CVE-2024-30198
BU
BuddyForms
ThemeKraft
6.1
0%
Mar 27WordPress Buddyforms plugin <= 2.8.5 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-2025
BW
BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages
themekraft
8.8
1%
Mar 23BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages <= 3.4.20 - Authenticated (Subscriber+) PHP Object Injection in get_simple_request
CVE-2024-1158
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
4.3
1%
Mar 13Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization
CVE-2024-1169
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
7.5
1%
Mar 7Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Upload
CVE-2024-1170
PF
Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC)
themekraft
8.2
1%
Mar 7Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) <= 2.8.7 - Missing Authorization to Unauthenticated Media Deletion
CVE-2023-5823
TG
TK Google Fonts GDPR Compliant
ThemeKraft
8.8
0%
Nov 6WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-25981
PF
Post Form
Themekraft
5.4
0%
Aug 25Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form plugin <= 2.8.1 versions
CVE-2022-38971
PF
Post Form Registration Form Profile Form For User Profiles And Content Forms
Themekraft
5.4
0%
Mar 16Stored Cross-Site Scripting (XSS) vulnerability in ThemeKraft Post Form – Registration Form – Profile Form for User Profiles and Content Forms for User Submissions plugin <= 2.7.5…
CVE-2023-26326
BU
Buddyforms
Themekraft
9.8
4%
Feb 23The BuddyForms WordPress plugin, in versions prior to 2.7.8, was affected by an unauthenticated insecure deserialization issue
CVE-2018-21003
BU
Buddyforms
Themekraft
9.8
2%
Aug 27The buddyforms plugin before 2.2.8 for WordPress has SQL injection