Login Request a demo
TH
Vendor
Themify
27 products with CVEs on record
55
CVEs
0
On KEV
0
New 30D
Products
BU
Builder
Themify
8.8
6 CVEs0 on KEV0 new
WP
Woocommerce Product Filter
Themify
7.5
6 CVEs0 on KEV0 new
PP
Portfolio Post
Themify
5.4
5 CVEs0 on KEV0 new
TU
Themify Ultra
Themify
8.8
5 CVEs0 on KEV0 new
UL
Ultra
Themify
8.8
5 CVEs0 on KEV0 new
TS
Themify Shortcodes
Themify
5.4
3 CVEs0 on KEV0 new
PT
Post Type Builder (PTB)
Themify
7.1
2 CVEs0 on KEV0 new
TB
Themify Builder
Themify
8.8
2 CVEs0 on KEV0 new
TE
Themify Edmin
Themify
9.9
2 CVEs0 on KEV0 new
TF
Themify Folo
Themify
9.9
2 CVEs0 on KEV0 new
BL
Bloggie
Themify
9.9
1 CVEs0 on KEV0 new
CM
Conditional Menus
Themify
6.1
1 CVEs0 on KEV0 new
FR
Framework
Themify
9.8
1 CVEs0 on KEV0 new
IC
Icons
Themify
5.4
1 CVEs0 on KEV0 new
PH
Photobox
Themify
9.9
1 CVEs0 on KEV0 new
PT
Post Type Builder Search Addon
Themify
6.1
1 CVEs0 on KEV0 new
PF
Product Filter
Themify
7.5
1 CVEs0 on KEV0 new
RE
Rezo
Themify
9.9
1 CVEs0 on KEV0 new
SH
Shopo
Themify
9.9
1 CVEs0 on KEV0 new
SH
Shortcodes
Themify
5.4
1 CVEs0 on KEV0 new
SL
Slide
Themify
9.9
1 CVEs0 on KEV0 new
SL
Store Locator
Themify
4.3
1 CVEs0 on KEV0 new
TE
Themify Event Post
Themify
5.9
1 CVEs0 on KEV0 new
TN
Themify Newsy
Themify
9.9
1 CVEs0 on KEV0 new
TP
Themify Popup
Themify
8.8
1 CVEs0 on KEV0 new
TS
Themify Sidepane WordPress Theme
Themify
9.9
1 CVEs0 on KEV0 new
WI
Wigi
Themify
9.9
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-56037
TP
Themify Popup
Themify
8.8
1%
Jul 2WordPress Themify Popup plugin <= 1.4.3 - PHP Object Injection vulnerability
CVE-2025-31013
TF
Themify Folo
Themify
7.1
0%
Jun 17WordPress Themify Folo theme <= 1.9.6 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-30996
WI
Wigi
Themify
9.9
1%
Jan 6Arbitrary File Upload Vulnerability in WordPress themes by Themify
CVE-2025-31048
SH
Shopo
Themify
9.9
0%
Jan 5WordPress Shopo <= 1.1.4 - Arbitrary File Upload Vulnerability
CVE-2025-31047
TE
Themify Edmin
Themify
8.8
0%
Jan 5WordPress Themify Edmin theme <= 2.0.0 - PHP Object Injection Vulnerability
CVE-2024-13319
TB
Themify Builder
Themify
6.1
0%
Jan 22Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting
CVE-2024-56216
BU
Builder
Themify
6.5
0%
Dec 31WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability
CVE-2024-12414
SL
Store Locator
Themify
4.3
0%
Dec 13Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery
CVE-2024-52423
BU
Builder
Themify
5.4
0%
Nov 18WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-44046
WP
Woocommerce Product Filter
Themify
4.8
0%
Oct 6WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-9385
BU
Builder
Themify
6.1
0%
Oct 5Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting
CVE-2024-7836
BU
Builder
Themify
4.3
0%
Aug 22Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication
CVE-2024-43133
TS
Themify Shortcodes
Themify
5.4
0%
Aug 12WordPress Themify Shortcodes plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-6027
PF
Product Filter
Themify
7.5
1%
Jun 21Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter
CVE-2023-46146
TU
Themify Ultra
Themify
8.8
0%
Jun 19WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability
CVE-2023-46148
TU
Themify Ultra
Themify
8.8
1%
Jun 19WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability
CVE-2024-3032
BU
Builder
Themify
6.1
1%
Jun 13Themify Builder < 7.5.8 - Open Redirect
CVE-2023-46145
TU
Themify Ultra
Themify
8.8
1%
May 17WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability
CVE-2024-4567
TS
Themify Shortcodes
Themify
5.4
0%
May 9Themify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button Shortcode
CVE-2024-31366
PT
Post Type Builder (PTB)
Themify
7.1
0%
Apr 9WordPress Post Type Builder (PTB) plugin <= 2.0.8 - Auth. Arbitrary Post/Page Creation vulnerability
CVE-2024-31365
PT
Post Type Builder (PTB)
Themify
7.1
0%
Apr 9WordPress Post Type Builder (PTB) plugin < 2.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-2278
WP
Woocommerce Product Filter
Themify
6.1
0%
Apr 1WooCommerce Product Filter < 1.4.4 - Admin+ Stored XSS
CVE-2024-2263
WP
Woocommerce Product Filter
Themify
4.8
0%
Apr 1WooCommerce Product Filter < 1.4.4 - Reflected XSS
CVE-2024-2262
WP
Woocommerce Product Filter
Themify
4.7
0%
Apr 1WooCommerce Product Filter < 1.4.4 - Filter Deletion via CSRF
CVE-2024-30440
TE
Themify Event Post
Themify
5.9
0%
Mar 29WordPress Themify Event Post plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-2732
TS
Themify Shortcodes
Themify
5.4
0%
Mar 26Themify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-24872
TB
Themify Builder
Themify
8.8
0%
Feb 21WordPress Themify Builder Plugin <= 7.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-51693
IC
Icons
Themify
5.4
0%
Feb 1WordPress Themify Icons Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46149
TU
Themify Ultra
Themify
8.8
1%
Dec 20WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload
CVE-2023-46147
TU
Themify Ultra
Themify
8.8
1%
Dec 20WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection
CVE-2023-2654
CM
Conditional Menus
Themify
6.1
0%
Jun 19The Conditional Menus WordPress plugin before 1.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could…
CVE-2022-32970
PP
Portfolio Post
Themify
5.4
0%
May 10Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Themify Themify Portfolio Post plugin <= 1.2.4 versions
CVE-2023-0362
PP
Portfolio Post
Themify
5.4
1%
Feb 13Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode…
CVE-2022-4787
SH
Shortcodes
Themify
5.4
0%
Jan 30Themify Shortcodes WordPress plugin before 2.0.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform…
CVE-2022-4464
PP
Portfolio Post
Themify
5.4
1%
Jan 16Themify Portfolio Post WordPress plugin before 1.2.1 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow…
CVE-2022-1532
WP
Woocommerce Product Filter
Themify
6.1
1%
Jun 13Themify WordPress plugin before 1.3.8 does not sanitise and escape the page parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site…
CVE-2022-1047
PT
Post Type Builder Search Addon
Themify
6.1
1%
May 9The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a…
CVE-2022-0200
PP
Portfolio Post
Themify
5.4
1%
Feb 14Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the response of the…
CVE-2013-20002
FR
Framework
Themify
9.8
4%
Jun 17Elemin allows remote attackers to upload and execute arbitrary PHP code via the Themify framework (before 1.2.2) wp-content/themes/elemin/themify/themify-ajax.php file
CVE-2021-24129
PP
Portfolio Post
Themify
5.4
1%
Mar 18Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities…