| CVE-2026-115869 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'variations' repeater…
|
6.4
Medium
|
Oct 30, 2026 |
| CVE-2026-111726 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'visible' Shortcode…
|
6.4
Medium
|
Oct 17, 2026 |
| CVE-2026-96831 |
Contributor PHP Object Injection in Themify Builder <= 7.8.1 versions
|
8.8
High
|
Sep 30, 2026 |
| CVE-2026-95864 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'css[fonts]' Parameter in…
|
7.2
High
|
Sep 25, 2026 |
| CVE-2026-75027 |
The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,…
|
5.3
Medium
|
Aug 22, 2026 |
| CVE-2026-15407 |
The Themify Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including,…
|
4.3
Medium
|
Jul 16, 2026 |
| CVE-2026-57369 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme…
|
7.1
High
|
Jul 13, 2026 |
| CVE-2026-15096 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Map Module 'b_width_map' Field…
|
6.4
Medium
|
Jul 11, 2026 |
| CVE-2026-15097 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'height_slider' Slider…
|
6.4
Medium
|
Jul 11, 2026 |
| CVE-2025-9353 |
The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all…
|
6.4
Medium
|
Sep 24, 2025 |
| CVE-2025-49396 |
Missing Authorization vulnerability in themifyme Themify Builder themify-builder allows Exploiting Incorrectly…
|
4.3
Medium
|
Aug 20, 2025 |
| CVE-2024-13319 |
The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg…
|
6.1
Medium
|
Jan 22, 2025 |
| CVE-2024-56216 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
|
6.5
Medium
|
Dec 31, 2024 |
| CVE-2024-52423 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themifyme…
|
6.5
Medium
|
Nov 18, 2024 |
| CVE-2024-9385 |
The Themify Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg…
|
6.1
Medium
|
Oct 5, 2024 |
| CVE-2024-7836 |
The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the…
|
4.3
Medium
|
Aug 22, 2024 |