Vulnerabilities in ThemeIsle

111 results
Vexday analysis

ThemeIsle apresenta footprint mínimo de vulnerabilidades com apenas 1 CVE catalogado na base, sem registros de exploração ativa ou classificação crítica. A vulnerabilidade identificada refere-se a exposição de informações (CWE-200), sendo anterior aos últimos 90 dias, indicando risco baixo e estável no curto prazo.

CVE-2023-23708MEDIUMWordPress Visualizer Plugin <= 3.9.4 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-42378MEDIUMWordPress WP Full Stripe Free plugin <= 8.4.1 - Broken Authentication vulnerabilityEPSS 0.4%CVE-2023-6781MEDIUMOrbit Fox Companion <= 2.10.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom fieldsEPSS 0.4%CVE-2026-8689MEDIUMVisualizer: Tables and Charts Manager for WordPress <= 3.11.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Chart Creation and Modification via renderChartPages() and uploadData() FunctionsEPSS 0.4%CVE-2025-14800HIGHRedirection for Contact Form 7 <= 3.2.7 - Unauthenticated Arbitrary File Copy via move_file_to_uploadEPSS 0.4%CVE-2020-36758MEDIUMRSS Aggregator by Feedzy <= 3.4.2 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2020-36759MEDIUMWoody code snippets <= 2.3.9 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2023-4887MEDIUMGoogle Maps Plugin by Intergeo <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.4%CVE-2025-8289HIGHRedirection for Contact Form 7 <= 3.2.4 - Unauthenticated PHP Object Injection via PHAR DeserializationEPSS 0.4%CVE-2026-4945MEDIUMOtter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification BypassEPSS 0.4%CVE-2024-2484MEDIUMOrbit Fox by ThemeIsle <= 2.10.34 - Authenticated (Contributor+) Stored Cross-Site Scripting via Services and Post Type Grid WidgetsEPSS 0.4%CVE-2025-55715HIGHWordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure VulnerabilityEPSS 0.4%CVE-2024-4635MEDIUMMenu Icons by ThemeIsle <= 0.13.13 - Authenticated (Author+) Stored Cross-Site Scripting via SVG UploadEPSS 0.4%CVE-2023-2608LOWMultiple Page Generator Plugin <= 3.3.17 - Cross-Site Request Forgery to SQL InjectionEPSS 0.4%CVE-2024-2226MEDIUMOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.4%CVE-2026-65526HIGHWordPress Visualizer plugin <= 4.0.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2024-10367MEDIUMOtter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadEPSS 0.4%CVE-2025-58789HIGHWordPress WP Full Stripe Free Plugin <= 8.2.5 - SQL Injection VulnerabilityEPSS 0.4%CVE-2025-24666MEDIUMWordPress Hyve Lite plugin <= 1.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2025-24668MEDIUMWordPress PPOM for WooCommerce plugin <= 33.0.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%