TH
Vendor
themifyme
30
CVEs
0
On KEV
3
New 30D
Products
TB8.8
Themify Builder
themifyme
15 CVEs0 on KEV2 new
TP6.5
Themify Popup
themifyme
2 CVEs0 on KEV1 new
TE7.5
Themify Event Post
themifyme
3 CVEs0 on KEV0 new
TW7.5
Themify – WooCommerce Product Filter
themifyme
3 CVEs0 on KEV0 new
TA6.5
Themify Audio Dock
themifyme
2 CVEs0 on KEV0 new
CM4.3
Conditional Menus
themifyme
1 CVEs0 on KEV0 new
TI6.5
Themify Icons
themifyme
1 CVEs0 on KEV0 new
TP7.1
Themify Portfolio Post
themifyme
1 CVEs0 on KEV0 new
TS6.5
Themify Shortcodes
themifyme
1 CVEs0 on KEV0 new
TS4.3
Themify Store Locator
themifyme
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-109989 | TP Themify Popup themifyme | 6.4 | Oct 17 | Themify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' Parameter |
| CVE-2026-111726 | TB Themify Builder themifyme | 6.4 | Oct 17 | Themify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode Attribute |
| CVE-2026-96831 | TB Themify Builder themifyme | 8.8 | Sep 30 | WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability |
| CVE-2026-95864 | TB Themify Builder themifyme | 7.2 | Sep 25 | Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter |
| CVE-2026-78172 | TW Themify – WooCommerce Product Filter themifyme | 6.1 | Sep 11 | Themify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site Scripting |
| CVE-2026-75027 | TB Themify Builder themifyme | 5.3 | Aug 22 | Themify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX Action |
| CVE-2026-15407 | TB Themify Builder themifyme | 4.3 | Jul 16 | Themify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX Action |
| CVE-2026-57369 | TB Themify Builder themifyme | 7.1 | Jul 13 | WordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-15096 | TB Themify Builder themifyme | 6.4 | Jul 11 | Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' Field |
| CVE-2026-15097 | TB Themify Builder themifyme | 6.4 | Jul 11 | Themify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module Field |
| CVE-2026-1032 | CM Conditional Menus themifyme | 4.3 | Mar 26 | Conditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options Update |
| CVE-2026-32449 | TE Themify Event Post themifyme | 6.5 | Mar 13 | WordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-67533 | TP Themify Portfolio Post themifyme | 7.1 | Dec 9 | WordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-9353 | TB Themify Builder themifyme | 6.4 | Sep 24 | Themify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-58787 | TP Themify Popup themifyme | 6.5 | Sep 5 | WordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49392 | TA Themify Audio Dock themifyme | 5.9 | Aug 20 | WordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49395 | TI Themify Icons themifyme | 6.5 | Aug 20 | WordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-49396 | TB Themify Builder themifyme | 4.3 | Aug 20 | WordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control Vulnerability |
| CVE-2025-39581 | TS Themify Shortcodes themifyme | 6.5 | Apr 16 | WordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) Vulnerability |
| CVE-2025-30832 | TE Themify Event Post themifyme | 6.5 | Mar 27 | WordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-30831 | TE Themify Event Post themifyme | 7.5 | Mar 27 | WordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerability |
| CVE-2024-13319 | TB Themify Builder themifyme | 6.1 | Jan 22 | Themify Builder <= 7.6.5 - Reflected Cross-Site Scripting |
| CVE-2024-56239 | TA Themify Audio Dock themifyme | 6.5 | Jan 2 | WordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-56216 | TB Themify Builder themifyme | 6.5 | Dec 31 | WordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerability |
| CVE-2024-12414 | TS Themify Store Locator themifyme | 4.3 | Dec 13 | Themify Store Locator <= 1.1.9 - Cross-Site Request Forgery |
| CVE-2024-52423 | TB Themify Builder themifyme | 5.4 | Nov 18 | WordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-44046 | TW Themify – WooCommerce Product Filter themifyme | 4.8 | Oct 6 | WordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-9385 | TB Themify Builder themifyme | 6.1 | Oct 5 | Themify Builder <= 7.6.2 - Reflected Cross-Site Scripting |
| CVE-2024-7836 | TB Themify Builder themifyme | 4.3 | Aug 22 | Themify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post Duplication |
| CVE-2024-6027 | TW Themify – WooCommerce Product Filter themifyme | 7.5 | Jun 21 | Themify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions Parameter |