Known vulnerabilities in themifyme Themify Popup
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-109989 | The Themify Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'popup_width_unit' parameter… | 6.4 Medium | Oct 17, 2026 |
| CVE-2025-58787 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme… | 6.5 Medium | Sep 5, 2025 |