Vulnerabilities in themifyme

29 results
Vexday analysis

A themifyme apresenta um perfil moderado de risco com 26 vulnerabilidades catalogadas, embora nenhuma esteja sob ataque ativo no momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando problemas recorrentes na validação de entrada, e apenas 1 vulnerabilidade crítica foi identificada. O ritmo recente de 4 publicações nos últimos 90 dias sugere descobertas contínuas, recomendando monitoramento regular das atualizações de segurança.

CVE-2024-52423MEDIUMWordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49392MEDIUMWordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-32449MEDIUMWordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-67533HIGHWordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-12414MEDIUMThemify Store Locator <= 1.1.9 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-58787MEDIUMWordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-49395MEDIUMWordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-1032MEDIUMConditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options UpdateEPSS 0.2%CVE-2026-95864HIGHThemify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' ParameterEPSS —