Vulnerabilidades en themifyme

26 resultados
Análisis Vexday

A themifyme apresenta um perfil moderado de risco com 26 vulnerabilidades catalogadas, embora nenhuma esteja sob ataque ativo no momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando problemas recorrentes na validação de entrada, e apenas 1 vulnerabilidade crítica foi identificada. O ritmo recente de 4 publicações nos últimos 90 dias sugere descobertas contínuas, recomendando monitoramento regular das atualizações de segurança.

CVE-2025-30831HIGHWordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerabilityEPSS 1.0%CVE-2024-6027CRITICALThemify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions ParameterEPSS 0.8%CVE-2024-56216MEDIUMWordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-4567MEDIUMThemify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button ShortcodeEPSS 0.4%CVE-2024-9385MEDIUMThemify Builder <= 7.6.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-2732MEDIUMThemify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-30832MEDIUMWordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9353MEDIUMThemify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-39581MEDIUMWordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-7836MEDIUMThemify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post DuplicationEPSS 0.3%CVE-2026-15407MEDIUMThemify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX ActionEPSS 0.3%CVE-2024-13319MEDIUMThemify Builder <= 7.6.5 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-56239MEDIUMWordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-44046MEDIUMWordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49396MEDIUMWordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2024-52423MEDIUMWordPress Themify Builder plugin <= 7.6.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49392MEDIUMWordPress Themify Audio Dock Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-67533HIGHWordPress Themify Portfolio Post plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-12414MEDIUMThemify Store Locator <= 1.1.9 - Cross-Site Request ForgeryEPSS 0.2%CVE-2025-58787MEDIUMWordPress Themify Popup Plugin <= 1.4.2 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%