Vulnerabilities in ThemeIsle
108 resultsVexday analysis
ThemeIsle apresenta footprint mínimo de vulnerabilidades com apenas 1 CVE catalogado na base, sem registros de exploração ativa ou classificação crítica. A vulnerabilidade identificada refere-se a exposição de informações (CWE-200), sendo anterior aos últimos 90 dias, indicando risco baixo e estável no curto prazo.
CVE-2026-39507HIGHWordPress Social Slider Feed plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-24573MEDIUMWordPress Visualizer plugin < 4.0.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-57618MEDIUMWordPress Neve PRO theme <= 3.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-53254MEDIUMWordPress Cyrlitera plugin <= 1.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-65563MEDIUMWordPress Orbit Fox by ThemeIsle plugin <= 3.0.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%CVE-2026-2410MEDIUMDisable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings UpdateEPSS 0.1%CVE-2026-61970MEDIUMWordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.1%CVE-2026-66437MEDIUMWordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.1%