Vulnerabilidades em themifyme
29 resultadosAnálise Vexday
A themifyme apresenta um perfil moderado de risco com 26 vulnerabilidades catalogadas, embora nenhuma esteja sob ataque ativo no momento. A fraqueza dominante é Cross-Site Scripting (CWE-79), indicando problemas recorrentes na validação de entrada, e apenas 1 vulnerabilidade crítica foi identificada. O ritmo recente de 4 publicações nos últimos 90 dias sugere descobertas contínuas, recomendando monitoramento regular das atualizações de segurança.
CVE-2025-30831HIGHWordPress Themify Event Post Plugin <= 1.3.2 - Local File Inclusion vulnerabilityEPSS 1.1%CVE-2024-6027CRITICALThemify - WooCommerce Product Filter <= 1.4.9 - Unauthenticated SQL Injection via conditions ParameterEPSS 0.8%CVE-2026-75027MEDIUMThemify Builder <= 7.8.0 - Missing Authorization to Unauthenticated Arbitrary Builder Data Modification via 'tb_update_old_data' AJAX ActionEPSS 0.6%CVE-2026-15407MEDIUMThemify Builder <= 7.7.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Post Stylesheet Write/Delete via tb_generate_on_fly AJAX ActionEPSS 0.5%CVE-2024-56216MEDIUMWordPress Themify Builder plugin <= 7.6.3 - Local File Inclusion vulnerabilityEPSS 0.5%CVE-2024-9385MEDIUMThemify Builder <= 7.6.2 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2024-4567MEDIUMThemify Shortcodes <= 2.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via themify_button ShortcodeEPSS 0.4%CVE-2026-78172MEDIUMThemify – WooCommerce Product Filter <= 1.5.5 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2025-30832MEDIUMWordPress Themify Event Post Plugin <= 1.3.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-15097MEDIUMThemify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'height_slider' Slider Module FieldEPSS 0.3%CVE-2024-2732MEDIUMThemify Shortcodes <= 2.0.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2026-15096MEDIUMThemify Builder <= 7.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Module 'b_width_map' FieldEPSS 0.3%CVE-2025-9353MEDIUMThemify Builder <= 7.6.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-39581MEDIUMWordPress Themify Shortcodes plugin <= 2.1.3 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.3%CVE-2024-13319MEDIUMThemify Builder <= 7.6.5 - Reflected Cross-Site ScriptingEPSS 0.3%CVE-2024-7836MEDIUMThemify Builder <= 7.6.1 - Missing Authorization to Authenticated (Contributor+) Post DuplicationEPSS 0.3%CVE-2024-56239MEDIUMWordPress Themify Audio Dock plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-44046MEDIUMWordPress Themify plugin <= 1.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57369HIGHWordPress Themify Builder plugin <= 7.7.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-49396MEDIUMWordPress Themify Builder Plugin <= 7.6.7 - Broken Access Control VulnerabilityEPSS 0.2%