Vulnerabilities in themifyme
33 resultsCVE-2026-95864HIGHThemify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' ParameterEPSS 0.3%CVE-2026-57369HIGHWordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-52423MEDIUMWordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49396MEDIUMWordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-67533HIGHWordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49392MEDIUMWordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2024-12414MEDIUMThemify Store Locator <= 1.1.9 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-58787MEDIUMWordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-49395MEDIUMWordPress Themify Icons Plugin <= 2.0.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-109989MEDIUMThemify Popup <= 1.4.7 - Authenticated (Author+) Stored Cross-Site Scripting via 'popup_width_unit' ParameterEPSS 0.2%CVE-2026-111726MEDIUMThemify Builder <= 7.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'visible' Shortcode AttributeEPSS 0.2%CVE-2026-1032MEDIUMConditional Menus <= 1.2.6 - Cross-Site Request Forgery to Menu Options UpdateEPSS 0.2%CVE-2026-32449MEDIUMWordPress Themify Event Post plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%